fix(maintainer): use affiliation=all for repo collaborators (#198)

Org-owned repos whose members are private (the GitHub default) resolved
to an empty maintainer set and were skipped by MaintainerPopulateService,
because affiliation=direct only returns users explicitly added to the
repo — it excludes insiders who get access via a team or org base
permission, and /orgs/{org}/members only exposes public members to the
app token.

Switch the collaborators fetch to affiliation=all so any insider with
repo access is captured. The live maintainers table is meant to reproduce
GitHub's author_association (OWNER/MEMBER/COLLABORATOR), which marks org
insiders as maintainers regardless of how access was granted, so this is
the faithful set — not a permission-level reinterpretation.

Fixes gittensor-ai-lab/sparkinfer showing zero maintainers.

Author: anderdc

packages/das/src/webhook/github-fetcher.service.ts

@@ -252,18 +252,23 @@ export class GitHubFetcherService implements OnModuleInit {
   // --- REST: live maintainer roles (collaborators + org members) ---
 
   /**
-   * Direct collaborators on the repo, returned as COLLABORATOR. The reconciler
-   * upgrades org members to MEMBER and the repo owner to OWNER. affiliation=direct
-   * excludes access inherited purely through org base permissions, so this is
-   * the set of users explicitly granted access to the repo.
+   * Collaborators on the repo, returned as COLLABORATOR. The reconciler upgrades
+   * org members to MEMBER and the repo owner to OWNER. We use affiliation=all (not
+   * =direct) so access granted via a team or org base permission is included, not
+   * just users explicitly added to the repo. This is deliberate: the live
+   * maintainers table must reproduce GitHub's author_association (OWNER / MEMBER /
+   * COLLABORATOR), which marks any org insider with repo access as a maintainer
+   * regardless of how that access was granted. affiliation=direct missed
+   * team/base-permission insiders, so org-owned repos whose members are private
+   * (the GitHub default) resolved to an empty maintainer set and were skipped.
    */
   async fetchRepoCollaborators(
     repoFullName: string,
   ): Promise<MaintainerRole[]> {
     const token = await this.getTokenForRepo(repoFullName);
     const [owner, repo] = repoFullName.split("/");
     const users = await this.restGetAllPages(
-      `https://api.github.com/repos/${owner}/${repo}/collaborators?affiliation=direct&per_page=100`,
+      `https://api.github.com/repos/${owner}/${repo}/collaborators?affiliation=all&per_page=100`,
       token,
     );
     return users.map((u: any) => ({