Harden team and read-only region output

[no-itsbackpack]

Summary

• serialize team memberships through a safe JSON projection that omits password metadata
• check the database engine before listing Vitess read-only regions
• return a clear error for PostgreSQL without calling the read-only-region endpoint

Test plan

• go test ./internal/cmd/org ./internal/cmd/database -count=1

[cursor]

Risk: low. Approved based on a successful Cursor Bugbot check with no findings requiring human review (Cursor Security Agent was not running). No reviewers were assigned.

  

_{Sent by Cursor Approval Agent: cli-reviewer}