fix(tables): restore the workspace ownership check on copilot row deletes

Switching deleteRow/deleteRowsByIds to take a TableDefinition dropped the
workspaceId argument that previously scoped the query, and the two branches
I added loaded the table without the ownership comparison every other
operation in the tool performs — letting a caller delete rows from a table
in another workspace. Both now reject a foreign table as not found.

Author: TheodoreSpeaks

apps/sim/lib/copilot/tools/server/table/user-table.ts

@@ -775,7 +775,10 @@ export const userTableServerTool: BaseServerTool<UserTableArgs, UserTableResult>
           const requestId = generateId().slice(0, 8)
           assertNotAborted()
           const deleteRowTable = await getTableById(args.tableId)
-          if (!deleteRowTable) {
+          // The old signature passed `workspaceId` into `deleteRow`, which scoped
+          // the query; taking a TableDefinition instead means the ownership check
+          // has to happen here, as every other operation in this tool does.
+          if (!deleteRowTable || deleteRowTable.workspaceId !== workspaceId) {
             return { success: false, message: `Table ${args.tableId} not found` }
           }
           await deleteRow(deleteRowTable, args.rowId, requestId)
@@ -1101,7 +1104,7 @@ export const userTableServerTool: BaseServerTool<UserTableArgs, UserTableResult>
           const requestId = generateId().slice(0, 8)
           assertNotAborted()
           const batchDeleteTable = await getTableById(args.tableId)
-          if (!batchDeleteTable) {
+          if (!batchDeleteTable || batchDeleteTable.workspaceId !== workspaceId) {
             return { success: false, message: `Table ${args.tableId} not found` }
           }
           const result = await deleteRowsByIds(