feat(gpu-service): scope create forms by the selected organization

In the platform-admin "all organizations" view, add an organization picker
(the CreateOrgScopeField slot) to the SSH public key, storage type,
storage, GPU instance and instance-template create forms, placed below the
name / display-name fields. Drop the hidden owner field and let the owner
derive from the request context, matching the model-route form.

For GPU instances, scope the instance-type list to clusters the chosen org
owns (client-side, by cluster owner) so an instance can't be scheduled onto
another org's cluster; when the org owns none, show "no instance type
available" and clear the selection, cluster and CPU/memory fields. Instance
templates gain a Global level (NULL owner) and an owner tag on the card.

src/pages/gpu-service/templates/components/template-card.tsx

@@ -13,6 +13,7 @@ import theadLogoZH from '@/assets/logo/t-head-zh.png';
 import tensorflowkLogo from '@/assets/logo/tensorflow.svg';
 import ubuntuLogo from '@/assets/logo/ubuntu_logo.png';
 import vllmLogo from '@/assets/logo/vllm.png';
+import PluginExtraFields from '@/components/plugin-extra-fields';
 import {
   GPUsConfigs,
   manfacturerValueMap
@@ -257,6 +258,10 @@ const TemplateCardItem: React.FC<TemplateCardProps> = ({ data, onSelect }) => {
             {data.displayName || data.name || '-'}
           </AutoTooltip>
           {renderManufacturerTag()}
+          <PluginExtraFields
+            name="OwnerScopeTag"
+            context={{ ownerPrincipalId: data.owner_principal_id }}
+          />
         </CardName>
         <InfoItem>
           <span>