[BetterAndBetterII]

Problem

Check and Query disagree on nested inheritIf / ofType / withRelation rules.

Given:

• partner.member inherits tenant.admin via parent
• account.member inherits partner.member via owner
• user:stephen is admin of tenant:test

Check(user:stephen member account:customer1) returns Authorized, but

select account where user:stephen is member

returns no rows. One hop (select partner where user:stephen is member) already worked.

queryRule listed only explicit warrants on the intermediate type. The partner membership is implicit, so the second hop never saw partner:testpart and the account query stayed empty. Self-referential rules (for example document.owner via parent) still need that explicit-edge walk so expansion stays bounded.

Change

When the inheritIf target is a different object type or relation, expand implicit intermediate grants with Query before following withRelation. Same-type/same-relation rules keep the explicit listWarrants path. Recursion is capped.

API tests in tests/v2/query-nested-inherit.json cover:

• Check remains Authorized at both hops
• Query lists the implicit partner and account
• Reverse select member of type user for account:customer1
• select explicit account ... stays empty

Fixes #341