Bump lightspeed-stack to authorization commit

Bump lightspeed-stack submodule to include the authorization changes
from lightspeed-core/lightspeed-stack#356

Use the new authorization features to restrict access to the
assisted-chat service to, for now, Red Hat employees only.

In the future we can open this up to all authenticated users.

Also bumped to a version that no longer requires the patching of
llama-stack / lightspeed-stack to support postgres SSL, so removed the
patching steps from the Containerfile.

Author: omertuc

Containerfile.assisted-chat

@@ -1,18 +1,12 @@
 # vim: set filetype=dockerfile
-# This is the digest of quay.io/lightspeed-core/lightspeed-stack:dev-20250814-7a531cb
-FROM quay.io/lightspeed-core/lightspeed-stack@sha256:90deb575e0c18bdcf9721aa7614826653ad13b717c992f12b89b6e1f0413179c
+# This is the digest of quay.io/lightspeed-core/lightspeed-stack:dev-20250826-913b5a6
+FROM quay.io/lightspeed-core/lightspeed-stack@sha256:09d6e2222eb058d85bfdc4e1283b18cee086182a711d71e2c983f355af6dc7b7
 
 RUN python3 -m ensurepip --default-pip && pip install --upgrade pip
 
 COPY requirements.txt .
 RUN python3 -m pip install --no-cache-dir -r requirements.txt
 
-
-USER root
-RUN microdnf install -y patch
-RUN curl -L https://github.com/meta-llama/llama-stack/commit/49c34dd0d49a960fec23d0be854890f219d917e7.patch | patch -p1 -d $(dirname $(dirname $(python3 -c "import llama_stack; print(llama_stack.__file__)")))
-RUN curl -L https://github.com/lightspeed-core/lightspeed-stack/commit/c59ea53ccfe1c6e0fb53d3ac880f925d1d3ede68.patch | patch -p1 -d $(dirname $(dirname $(python3 -c "import lightspeed_stack; print(lightspeed_stack.__file__)")))
-
 USER 1001
 
 EXPOSE 8080

lightspeed-stack

@@ -218,6 +218,12 @@ if [[ -n "$CONVERSATION_ID" ]]; then
 else
     # Only select model for new conversations
     echo "Selecting model for new conversation..."
+
+    if ! get_ocm_token; then
+        echo "Failed to get OCM token for query"
+        return 1
+    fi
+
     MODELS=$(get_available_models)
     model_selection=$(select_model "$MODELS")
     MODEL_NAME=$(echo "$model_selection" | cut -d'|' -f1)

scripts/query.sh

@@ -165,6 +165,40 @@ objects:
           jwt_configuration:
             user_id_claim: ${USER_ID_CLAIM}
             username_claim: ${USERNAME_CLAIM}
+            role_rules:
+              - jsonpath: "$.realm_access.roles[*]"
+                operator: "contains"
+                value: "redhat:employees"
+                roles: ["redhat_employee"]
+      authorization:
+        access_rules:
+          - role: redhat_employee
+            actions:
+            - get_models
+          # Temporarily we only want redhat employees to be able to use the service,
+          # uncomment when we want to allow all authenticated users
+          # - role: "*"
+          #   actions:
+            - query
+            - streaming_query
+            - get_conversation
+            - list_conversations
+            - delete_conversation
+            - feedback
+            - get_metrics
+            - info
+          # "nobody" is a made up role, doesn't do anything but just good for being explicit
+          # about what is not allowed by anyone
+          - role: nobody
+            actions:
+            # This exposes the database password - once LSC fixes this issue we
+            # can allow this for employees
+            - get_config
+            # For now we don't want to let even administrators / employees access other users conversations
+            - query_other_conversations
+            - delete_other_conversations
+            - list_other_conversations
+            - read_other_conversations
       mcp_servers:
         - name: mcp::assisted
           url: "${MCP_SERVER_URL}"