feat(security): the external organization role is the EXTERNAL principal — owner-only org-wide default, explicit grants only

feat(security): the external organization role is the EXTERNAL principal — owner-only org-wide default, explicit grants only #816