fix(config): migrate legacy group allow aliases (#60597)

* fix(config): migrate legacy group allow aliases

* fix(config): inline legacy streaming migration helpers

* refactor(config): rename legacy account matcher helper

* chore(agents): codify config contract boundaries

* fix(config): keep legacy allow aliases writable

* Update AGENTS.md

extensions/googlechat/src/monitor-access.test.ts

@@ -230,7 +230,7 @@ describe("googlechat inbound access policy", () => {
           config: {
             groups: {
               "spaces/AAA": {
-                allow: true,
+                enabled: true,
               },
             },
           },
@@ -337,7 +337,7 @@ describe("googlechat inbound access policy", () => {
                 users: ["users/alice"],
               },
               "Finance Ops": {
-                allow: false,
+                enabled: false,
                 users: ["users/bob"],
               },
             },