Function validate_ansible_limit_membership_access 

pub async fn validate_ansible_limit_membership_access(
    infra: &InfraContext<'_>,
    token: &str,
    ansible_limit: &str,
) -> Result<(), Error>

Validate every xname in a comma-separated ansible_limit-style string against the caller’s accessible groups.

Splits on ,, trims, and forwards to validate_user_group_members_access. Admin tokens skip the check entirely. Use this at handler boundaries where the request shape is the raw ansible-limit string (e.g. CFS session creation).