Terra never tells a signed-in user which roles they hold

Client-reported 2026-08-21 14:51: Sebastian Puia signed in with his UBA account and reported "Entre con el de la facu. Y esta como Alumno." MEASURED: his terra membership is docente + client, granted 2026-08-14 07:24Z and 2026-07-30 11:57Z, both live in vUserGroups with toAt and deletedAt NULL. He holds NO alumno group in any app. So the grant is correct and the report is not a permissions defect. WHAT HE ACTUALLY SAW: nothing in terra displays a users own role - grep over src finds no role or group rendering in mi-perfil, app-header or app-sidebar, which read user.roles only to decide WHICH NAV LINKS to build. homeRouteForRoles sends docente/jtp to /alumnos, whose h1 is "Alumnos con acceso a Terra". He landed on a page headed Alumnos and read the page title as a statement about himself. THE DEFECT IS THE ABSENCE, NOT A WRONG LABEL: an app that routes people by role and never states the role leaves every user inferring their own status from whatever page they were sent to, and the inference is silent and unfalsifiable from their side. This is also why a second account was suspected: he has only ONE user row - no gmail account exists under puia at all, so the alumno/docente split across two accounts that was described to him does not exist in the data. Fix: state the role set on an authenticated surface.