fix: add model.access rules on project.scrum.story.feature