feat(roles): add admin store roles page, permission i18n, and menu integration

- Add admin store roles page with merchant→store cascading for superadmin
  and store-only selection for platform admin
- Add permission catalog API with translated labels/descriptions (en/fr/de/lb)
- Add permission translations to all 15 module locale files (60 files total)
- Add info icon tooltips for permission descriptions in role editor
- Add store roles menu item and admin menu item in module definition
- Fix store-selector.js URL construction bug when apiEndpoint has query params
- Add admin store roles API (CRUD + platform scoping)
- Add integration tests for admin store roles and permission catalog

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/tenancy/definition.py

@@ -87,9 +87,11 @@ tenancy_module = ModuleDefinition(
             "stores",
             "admin-users",
             "merchant-users",
+            "store-roles",
         ],
         FrontendType.STORE: [
             "team",
+            "roles",
         ],
         FrontendType.MERCHANT: [
             "stores",
@@ -122,6 +124,13 @@ tenancy_module = ModuleDefinition(
                         order=20,
                         is_mandatory=True,
                     ),
+                    MenuItemDefinition(
+                        id="store-roles",
+                        label_key="tenancy.menu.store_roles",
+                        icon="shield-check",
+                        route="/admin/store-roles",
+                        order=30,
+                    ),
                 ],
             ),
             MenuSectionDefinition(
@@ -202,6 +211,14 @@ tenancy_module = ModuleDefinition(
                         route="/store/{store_code}/team",
                         order=5,
                     ),
+                    MenuItemDefinition(
+                        id="roles",
+                        label_key="tenancy.menu.roles",
+                        icon="shield-check",
+                        route="/store/{store_code}/team/roles",
+                        order=10,
+                        requires_permission="team.view",
+                    ),
                 ],
             ),
         ],