[fga] WorkspaceService port ops

[geropl]

Description

Moves openPort, closePort and getOpenPorts to WorkspaceService, guarded by the access permission.

Why access? The old perm system called used operatio "update", but the actual check was identical to "get".

Summary generated by Copilot

🤖 Generated by Copilot at 0e4c6aa

Refactor port-related methods in GitpodServerImpl to use WorkspaceService and add tests for port operations.

Related Issue(s)

Relates to: EXP-207

How to test

• sign up with user 1 and 2 (in a different session/browser)
  • unblock user 2
• enable centralizedPermissions for user 2 and user 1
• user 1: start a workspace with a service serving a private port
  • note that the ports view works ✔️
• user 2: try to access the port
  • note that you see a blank page ✔️
• user 1: make that port public ✔️
• user 2: reload, and see the page being loaded ✔️

Documentation

Preview status

Gitpod was successfully deployed to your preview environment.

• 🏷️ Name - gpl-fga-ports
• 🔗 URL - gpl-fga-ports.preview.gitpod-dev.com/workspaces.
• 📚 Documentation - See our internal documentation for information on how to interact with your preview environment.
• 📦 Version - gpl-fga-ports-gha.15500

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[svenefftinge]

code LGTM

[geropl]

/unhold

Thanks for the quick review! 🙏