Sub-ticket of PLUTO-368 vUserRolesActive view — auth-actions.ts:29-115 repeats userRoles+lookupOptions JOIN across getCurrentUser/getUserById; fold into view returning roleName + caps[] · pluto