[Web] Hide access request promoted notification quick action button if the user is already part of the access list

[rudream]

Purpose

e counterpart: https://github.com/gravitational/teleport.e/pull/5893

This PR fixes a UX bug which caused users to still see the "Log in again to gain access" button on their access request promoted notification even if they had already done so.

The logic simply works by keeping track of when the user logged in, if they logged in before the access request was promoted, then they will be shown the button to log in again.

Demo

fix.access.list.ux.mov

[gzdunek]

This fix is a bit hacky, but I guess we don't have a way to tell if a user gained the access, right?

[rudream]

This fix is a bit hacky, but I guess we don't have a way to tell if a user gained the access, right?

@gzdunek Yes, I had explored other ways to try to actually determine whether the access list was active, but there was no way to without surfacing lots of information about the session and touching lots of related code, which I figured was not worth it for a small UX bug. The issue is that while it's possible and quite easy to know when the user has been added to the access list (for example by making a request to fetch access lists), it's not possible to know whether or not those new permissions have been applied to their current web session and certificate. Keeping track of login time seemed the most straightforward way which works as intended and doesn't introduce any risk for regressions.

[public-teleport-github-review-bot]

@rudream See the table below for backport results.

Branch	Result
branch/v16	Failed
branch/v17	Create PR