Use the passed-in user for team permission checks

Permission checks in `_agent_has_permission()` were using session user instead of the passed-in user, breaking Permission Inspector and delegated queries.