feat: files visiblity with file configuration

[SujithThirumalaisamy]

Ref: #10404

• Added FileFolderConfig with isPublic key.
• Updated file-path-guard.ts to ignoreExpiration to validate the token if isPublic is true.
• Token verification ignores expiration, assuming it's used to fetch file metadata with a required workspaceId as we cannot remove the token as we will loose the workspaceId.

[SujithThirumalaisamy]

Sorry for the merges. Forgot to check my git global config :)

[greptile-apps]

PR Summary

This PR implements file visibility configuration to handle public assets like workspace logos, particularly addressing token expiration issues in emails.

• Added FileFolderConfig type in file-folder.interface.ts with isPublic flag to control folder accessibility
• Modified FilePathGuard to ignore token expiration for public folders while maintaining workspaceId validation
• Added checkFileFolder utility function to validate folder paths, though with some redundant logic
• Improved board column layout by repositioning the 'new record' button outside draggable components

_{💡 (2/5) Greptile learns from your feedback when you react with 👍/👎!}

_{4 file(s) reviewed, 4 comment(s)
Edit PR Review Bot Settings | Greptile}

[greptile-apps]

style: Duplicates folder validation logic from checkFilePath. Consider extracting common validation into a shared function.

[greptile-apps]

logic: No validation for empty filePath or malformed paths that could cause rootFolder to be undefined

Suggested change

	const [rootFolder] = sanitizedFilePath.split('/');
	if (!sanitizedFilePath) {
	throw new BadRequestException('File path cannot be empty');
	}
	const [rootFolder] = sanitizedFilePath.split('/');
	if (!rootFolder) {
	throw new BadRequestException('Invalid file path format');
	}

[greptile-apps]

logic: Still requiring token for public folders negates the purpose of making them public. Consider removing token requirement for public folders entirely.

[SujithThirumalaisamy]

Currently the workspaceId which is required to fetch the images is in the token. So this is not feasible currently

[greptile-apps]

PR Summary

This PR refines the file visibility implementation by adding proper type definitions and folder configurations for public and private file access.

• Introduced FileFolderConfig type with isPublic boolean flag in /packages/twenty-server/src/engine/core-modules/file/interfaces/file-folder.interface.ts
• Configured public access for ProfilePicture, WorkspaceLogo, and PersonPicture folders while keeping Attachment and ServerlessFunction private
• Potential security concern: FilePathGuard still requires tokens for public folders, which seems unnecessary and could be simplified

_{3 file(s) reviewed, 1 comment(s)
Edit PR Review Bot Settings | Greptile}

[greptile-apps]

logic: Type casting to FileFolder may fail at runtime if rootFolder is kebab-cased. Need to reverse the kebab case transformation.