[permissions] fix workflows + remove shouldBypassPermissionChecks for system objects (#12559)

In this PR 

1. fix workflow step creation by adding forgotten
`shouldBypassPermissionChecks` in WorkflowVersionStepWorkspaceService
2. clarify the rule for twentyORMGlobalManager: do not add unnecessary
`shouldBypassPermissionChecks` for system objects (there are no
object-records permission checks on system objects, they are dealt with
at resolver level)

packages/twenty-server/src/modules/blocklist/repositories/blocklist.repository.ts

@@ -35,9 +35,6 @@ export class BlocklistRepository {
       await this.twentyORMGlobalManager.getRepositoryForWorkspace(
         workspaceId,
         BlocklistWorkspaceEntity,
-        {
-          shouldBypassPermissionChecks: true,
-        },
       );
 
     return blockListRepository.find({

packages/twenty-server/src/modules/contact-creation-manager/services/create-company-and-contact.service.ts

@@ -61,9 +61,6 @@ export class CreateCompanyAndContactService {
       await this.twentyORMGlobalManager.getRepositoryForWorkspace(
         workspaceId,
         WorkspaceMemberWorkspaceEntity,
-        {
-          shouldBypassPermissionChecks: true,
-        },
       );
 
     const workspaceMembers = await workspaceMemberRepository.find();

packages/twenty-server/src/modules/workflow/workflow-builder/workflow-step/workflow-version-step.workspace-service.ts

@@ -77,6 +77,7 @@ export class WorkflowVersionStepWorkspaceService {
       await this.twentyORMGlobalManager.getRepositoryForWorkspace<WorkflowVersionWorkspaceEntity>(
         workspaceId,
         'workflowVersion',
+        { shouldBypassPermissionChecks: true },
       );
 
     const workflowVersion = await workflowVersionRepository.findOne({
@@ -594,6 +595,7 @@ export class WorkflowVersionStepWorkspaceService {
             await this.twentyORMGlobalManager.getRepositoryForWorkspace(
               workspaceId,
               field.settings.objectName,
+              { shouldBypassPermissionChecks: true },
             );
 
           const record = await repository.findOne({