chore: restrict collectives to only query their applications
chore: restrict collectives to only query their applications

OpenCollective/opencollective-api,OpenCollective/opencollective-api,OpenCollective/opencollective-api