Team object, team membership
Implement Team.run_jobs
Add type info to member propagation jobs
Explicitly set member type
Remove STI for members
Expect member key
Test membership filtering by Team and CloudUser
Make remove_members work the same as add_members, default members to user members
Make role_for work with teams
Handle type being nil in the datastore for user members
Add test to distinguish type in member operations
Typo
Move pending op
Propagate team changes, expand team members into domain and apps
Add team propagation tests
Initial work to propagate grants