## What happened?

`GET /v1/models` returns only proxy-wide models for keys bound to a team, even when the team's ACL contains team-specific entries. The team's models are silently dropped.

Root cause is in `get_key_models()` at `litellm/proxy/auth/model_checks.py:114-115`. When the team's ACL contains the `"all-proxy-models"` sentinel, the function **replaces** the resolved model list with `proxy_model_list` instead of **unioning** it. Any team-specific models in the ACL are discarded.

The sentinel ends up in the ACL through a separate write-path quirk: a team created without specifying `models` is stored with `models = []`, and the first call to `add_new_models_to_team` injects `"all-proxy-models"` because it treats an empty list as "all access". This is the path Terraform-provisioned teams take.

`get_team_models()` at line 142 already handles the same sentinel correctly using `set.update()` (union). The two read paths disagree on semantics.

**Expected:** `/v1/models` returns the union of the team's allowed models and proxy-wide models. **Actual:** `/v1/models` returns only proxy-wide models; team-specific entries are dropped.

The admin UI is not affected because it uses `ge…