fix(settings): align credential groups with organization rollout

[waleedlatif1]

Summary

• Apply the shared organization settings visibility rule before the Credential Groups availability check.
• Keep Credential Groups in workspace settings when the organization rollout is off, and in organization settings when it is on.

Type of Change

• Bug fix

Testing

• 110 workspace and organization sidebar, routing, navigation, and authorization tests passed.
• App type-check, repository lint, all 47 audits (including API boundary validation), block registry checks, and docs manifest check passed.
• All eight cleanup review passes found no issues.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 20, 2026 12:03am UTC

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 2 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge because Credential Groups remains available on the appropriate settings surface under the same feature and authorization conditions.

Summary

This PR corrects Credential Groups placement by applying the shared organization-plane rollout filter before workspace-specific availability checks.

• Keeps Credential Groups in workspace settings while organization rollout is disabled.
• Moves Credential Groups to organization settings while rollout is enabled.
• Updates workspace sidebar expectations for administrators and members.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Credential Groups navigation item] --> B{Organization rollout enabled?}
  B -- No --> C{Viewer is organization admin and feature is available?}
  C -- Yes --> D[Show in workspace settings]
  C -- No --> E[Hide item]
  B -- Yes --> F[Hide from workspace settings]
  F --> G[Expose through organization settings with equivalent authorization]

Loading

_{Reviews (1) · Last reviewed commit: "fix(settings): align credential groups w..."}