fix(lint): list metadata-protocol in the changeset; state both directions of a has()/optional member read (#22274)

The changeset names metadata-protocol's doors in its BREAKING section, so
that package carries the entry beside lint, as the door-crossing changesets
in this seam do. The member refusal's tail no longer says a has() test or an
optional read is admitted: it is refused on every write, or admitted on every
write when negated or defaulted to a passing value.

Claude-Session: https://claude.ai/code/session_01LAi5BVvQNiYzepSAcsoFLK
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

.changeset/22274-option-visible-when-members.md

@@ -1,5 +1,6 @@
 ---
 "@objectstack/lint": minor
+"@objectstack/metadata-protocol": minor
 ---
 
 fix(lint)!: `os build` and the object save door refuse a select option's `visibleWhen` that reads a member of `ctx` or `os` the server's option check never binds, such as `os.org.id`, `os.env` or `ctx.locale` (#22274)

packages/lint/src/validate-expressions.ts

@@ -1286,7 +1286,8 @@ function optionVisibleWhenMemberIssue(
         `its ADR-0068 aliases \`user\`, \`ctx\` and \`os\`), and under \`${root}\` it binds the ` +
         `\`user\` member and nothing else, so ${path} is unbound there. ` +
         `${FIELD_TRAVERSAL_CONSEQUENCE['option visibleWhen']}; a \`has()\` test or an optional read ` +
-        `of it finds it unset on every write. ${prescription}`,
+        `of it never finds it set, so the option is refused on every write instead, or admitted on ` +
+        `every write when the test is negated or the read's default passes. ${prescription}`,
     };
   }
   return null;