feat(hybridcloud): Propagate ViewerContext in VSTS webhook

Wrap the per-org iteration in handle_status_change with
webhook_viewer_context so downstream code has access to
the current organization identity via the ViewerContext contextvar.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: gricha

src/sentry/integrations/vsts/webhooks.py

@@ -24,6 +24,7 @@
 from sentry.integrations.types import IntegrationProviderSlug
 from sentry.integrations.utils.metrics import IntegrationWebhookEvent, IntegrationWebhookEventType
 from sentry.integrations.utils.sync import sync_group_assignee_inbound
+from sentry.integrations.utils.webhook_viewer_context import webhook_viewer_context
 from sentry.ratelimits.config import RateLimitConfig
 from sentry.types.ratelimit import RateLimit, RateLimitCategory
 from sentry.utils.email import parse_email
@@ -173,24 +174,25 @@ def handle_status_change(
             "status_change": status_change,
         }
         for org_integration in org_integrations:
-            installation = integration.get_installation(
-                organization_id=org_integration.organization_id
-            )
-            if isinstance(installation, IssueSyncIntegration):
-                installation.sync_status_inbound(
-                    external_issue_key,
-                    {
-                        "new_state": status_change["newValue"],
-                        # old_state is None when the issue is New
-                        "old_state": status_change.get("oldValue"),
-                        "project": project,
-                    },
-                )
-            else:
-                lifecycle.record_halt(
-                    ProjectManagementHaltReason.SYNC_NON_SYNC_INTEGRATION_PROVIDED,
-                    extra=logging_context,
+            with webhook_viewer_context(org_integration.organization_id):
+                installation = integration.get_installation(
+                    organization_id=org_integration.organization_id
                 )
+                if isinstance(installation, IssueSyncIntegration):
+                    installation.sync_status_inbound(
+                        external_issue_key,
+                        {
+                            "new_state": status_change["newValue"],
+                            # old_state is None when the issue is New
+                            "old_state": status_change.get("oldValue"),
+                            "project": project,
+                        },
+                    )
+                else:
+                    lifecycle.record_halt(
+                        ProjectManagementHaltReason.SYNC_NON_SYNC_INTEGRATION_PROVIDED,
+                        extra=logging_context,
+                    )
 
 
 def handle_updated_workitem(data: Mapping[str, Any], integration: RpcIntegration) -> None: