App owners can now view access-request policies

Fixed a bug where the App appears in application catalog card rendered an empty table for app owners on the App page. App owners now have per-app catalog read access and can see the full policy table — access profile, approval flow, provisioning/deprovisioning workflow, requests, eligibility group, and temporary access. Write permissions remain admin-only.