No view of effective access on a repository; outsiders get inconsistent org answers #200

repo access list ttorg/widget is empty when every grant reaches the repository through teams and org roles; the answer to "who can push here" is spread over org team show, one team at a time, plus org settings members-role. Wants repo access list to report effective access with its source (direct, team, org role, owner).

Also observed: org show and org members list return the member list to any account, while org team list and org team show answer "no organization" to a non-member. Pick one rule for what an outsider learns about an org and apply it to all four.

Ref #185