List Organization Scope Access

Portfolios/accounts the organization already has effective reader on.

The grant-access UI uses these lists to hide scopes where granting reader would be redundant; the organization detail page renders them (id + display name) to show which scopes the org's members inherit reader access on.