allow org-owner to stop workspace on all workspaces in the organization

Author: geropl

components/spicedb/schema/schema.yaml

@@ -143,7 +143,7 @@ schema: |-
       // Note: All of this is modelled after current behavior.
       // There are a lot of improvements we can make here in the light of Organizations, but we explicitly do that as a separate step
       permission start = owner
-      permission stop = owner + org->installation_admin
+      permission stop = owner + org->installation_admin + org->owner
       permission delete = owner
 
       // Whether a user can read basic info/metadata of a workspace