feat: add chat sharing foundation (#25041)

enterprise/audit/table.go

@@ -437,6 +437,8 @@ var auditableResourcesTypes = map[any]map[string]Action{
 		"mode":                  ActionTrack,
 		"mcp_server_ids":        ActionTrack,
 		"labels":                ActionTrack,
+		"user_acl":              ActionTrack,
+		"group_acl":             ActionTrack,
 		"pin_order":             ActionTrack,
 		"last_read_message_id":  ActionIgnore, // User-scoped read cursor.
 		"last_injected_context": ActionIgnore, // Internal lifecycle.

enterprise/cli/testdata/coder_server_--help.golden

@@ -37,6 +37,10 @@ OPTIONS:
           creating a token without specifying a duration, such as when
           authenticating the CLI or an IDE plugin.
 
+      --disable-chat-sharing bool, $CODER_DISABLE_CHAT_SHARING
+          Disable chat sharing. Chat ACL checking is disabled and only owners
+          can access their chats.
+
       --disable-owner-workspace-access bool, $CODER_DISABLE_OWNER_WORKSPACE_ACCESS
           Remove the permission for the 'owner' role to have workspace execution
           on all workspaces. This prevents the 'owner' from ssh, apps, and