Summary

• When a team member holds the maintainer role, GitHub's ListTeamMembersByID API filters them out of role=member results. This caused maintainers to only receive a grant on the maintainer entitlement, never on the base team-member entitlement — under-counting membership.
• This fix emits an additional teamRoleMember grant for every user returned by the maintainer role query, so all team members appear under the base membership entitlement regardless of their elevated role.
• Matches GitHub's own model where every maintainer is, by definition, also a team member.

Test plan

• Verify that syncing a GitHub org with a team containing maintainer-role users now produces grants on both the member and maintainer entitlements for those users
• Verify that users with only the member role still receive exactly one member grant (no duplicates)
• Check grant ID uniqueness: maintainer users will have two grants with distinct V1Identifiers (team-grant:<team>:<user>:member and team-grant:<team>:<user>:maintainer)

Fixes: CXH-1513

Automated PR Notice

This PR was automatically created by c1-dev-bot as a potential implementation.

This code requires:

• Human review of the implementation approach
• Manual testing to verify correctness
• Approval from the appropriate team before merging