### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

I manage model access with the new Access Groups (the entity ones from `/v1/access_group`, attached to teams via `access_group_ids`). The teams have `models: ["no-default-models"]` so they only get what the groups grant.

`GET /v1/models` with those same keys returns **none** of these models. The only thing in the response is the literal string `no-default-models`, as if it were a model.

So my apps get an empty model picker with one fake entry in it. Meanwhile the models work fine if you type their names manually.

From what I can tell, two things are going on:

1. The code that builds the `/v1/models` response never looks at `access_group_ids`. It only follows the `models` fields. 2. Because the resolver ends up holding `no-default-models` and can not match it to anything, it just passes it through into the response.

### Steps to Reproduce

1. Create an access group containing it: ``` curl -X POST "$PROXY/v1/access_group" -H "Authorization: Bearer $MASTER_KEY" \ -H "Content-Type: application/json" \ -d '{"access_group_name": …