Make project access explicit

Private projects are discoverable only by their explicit members and remain protected across files, search, exports and AI context.