Update permissions

Author: filiptronicek

components/spicedb/schema/schema.yaml

@@ -92,7 +92,9 @@ schema: |-
       permission read_billing = member + owner + installation->admin
       permission write_billing = owner + installation->admin
 
-      permission read_prebuild = collaborator + member + owner + installation->admin
+      // Note that there are two different read_prebuild permissions: this one, guarding primarily the listPrebuilds method in the API and then the other under projects, which is the actual permission used for checking if a user can use a prebuild for a repository.
+      // Today, the difference is that collaborators can't read prebuilds on an org but can on a repository (project).
+      permission read_prebuild = member + owner + installation->admin
 
       permission create_workspace = member + collaborator