Multi-role members, round detail UI overhaul, dashboard jury progress, and submit bug fix

- Add roles UserRole[] to User model with migration + backfill from existing role column
- Update auth JWT/session to propagate roles array with [role] fallback for stale tokens
- Update tRPC hasRole() middleware and add userHasRole() helper for inline role checks
- Update ~15 router inline checks and ~13 DB queries to use roles array
- Add updateRoles admin mutation with SUPER_ADMIN guard and priority-based primary role
- Add role switcher UI in admin sidebar and role-nav for multi-role users
- Remove redundant stats cards from round detail, add window dates to header banner
- Merge Members section into JuryProgressTable with inline cap editor and remove buttons
- Reorder round detail assignments tab: Progress > Score Dist > Assignments > Coverage > Jury Group
- Make score distribution fill full vertical height, reassignment history always open
- Add per-juror progress bars to admin dashboard ActiveRoundPanel for EVALUATION rounds
- Fix evaluation submit bug: use isSubmitting state instead of startMutation.isPending

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

prisma/migrations/20260224163014_add_user_roles_array/migration.sql

@@ -0,0 +1,59 @@
+-- DropForeignKey
+ALTER TABLE "ConflictOfInterest" DROP CONSTRAINT "ConflictOfInterest_roundId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "Project" DROP CONSTRAINT "Project_programId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "TaggingJob" DROP CONSTRAINT "TaggingJob_roundId_fkey";
+
+-- DropIndex
+DROP INDEX "DiscussionComment_discussionId_createdAt_idx";
+
+-- DropIndex
+DROP INDEX "EvaluationDiscussion_status_idx";
+
+-- DropIndex
+DROP INDEX "LiveVote_isAudienceVote_idx";
+
+-- DropIndex
+DROP INDEX "Message_scheduledAt_idx";
+
+-- DropIndex
+DROP INDEX "MessageRecipient_messageId_idx";
+
+-- DropIndex
+DROP INDEX "MessageRecipient_userId_isRead_idx";
+
+-- DropIndex
+DROP INDEX "Project_programId_roundId_idx";
+
+-- DropIndex
+DROP INDEX "Project_roundId_idx";
+
+-- DropIndex
+DROP INDEX "ProjectFile_projectId_roundId_idx";
+
+-- DropIndex
+DROP INDEX "ProjectFile_roundId_idx";
+
+-- DropIndex
+DROP INDEX "TaggingJob_roundId_idx";
+
+-- DropIndex
+DROP INDEX "WebhookDelivery_createdAt_idx";
+
+-- AlterTable
+ALTER TABLE "User" ADD COLUMN     "roles" "UserRole"[] DEFAULT ARRAY[]::"UserRole"[];
+
+-- Backfill: populate roles array from existing role column
+UPDATE "User" SET "roles" = ARRAY["role"]::"UserRole"[];
+
+-- AddForeignKey
+ALTER TABLE "Project" ADD CONSTRAINT "Project_programId_fkey" FOREIGN KEY ("programId") REFERENCES "Program"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "MessageTemplate" ADD CONSTRAINT "MessageTemplate_createdBy_fkey" FOREIGN KEY ("createdBy") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- RenameIndex
+ALTER INDEX "DeliberationVote_sessionId_juryMemberId_projectId_runoffRo_key" RENAME TO "DeliberationVote_sessionId_juryMemberId_projectId_runoffRou_key";

prisma/migrations/migration_lock.toml

@@ -1,3 +1,3 @@
-# Please do not edit this file manually
-# It should be added in your version-control system (e.g., Git)
-provider = "postgresql"
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"

prisma/schema.prisma

@@ -303,6 +303,7 @@ model User {
   name           String?
   emailVerified  DateTime? // Required by NextAuth Prisma adapter
   role           UserRole   @default(JURY_MEMBER)
+  roles          UserRole[] @default([])
   status         UserStatus @default(INVITED)
   expertiseTags  String[]   @default([])
   maxAssignments Int? // Per-round limit

prisma/seed.ts

@@ -347,6 +347,7 @@ async function main() {
         email: account.email,
         name: account.name,
         role: account.role,
+        roles: [account.role],
         status: isSuperAdmin ? UserStatus.ACTIVE : UserStatus.NONE,
         passwordHash: isSuperAdmin ? passwordHash : null,
         mustSetPassword: !isSuperAdmin,
@@ -385,6 +386,7 @@ async function main() {
         email: j.email,
         name: j.name,
         role: UserRole.JURY_MEMBER,
+        roles: [UserRole.JURY_MEMBER],
         status: UserStatus.NONE,
         country: j.country,
         expertiseTags: j.tags,
@@ -416,6 +418,7 @@ async function main() {
         email: m.email,
         name: m.name,
         role: UserRole.MENTOR,
+        roles: [UserRole.MENTOR],
         status: UserStatus.NONE,
         country: m.country,
         expertiseTags: m.tags,
@@ -444,6 +447,7 @@ async function main() {
         email: o.email,
         name: o.name,
         role: UserRole.OBSERVER,
+        roles: [UserRole.OBSERVER],
         status: UserStatus.NONE,
         country: o.country,
       },
@@ -545,6 +549,7 @@ async function main() {
           email,
           name: name || `Applicant ${rowIdx + 1}`,
           role: UserRole.APPLICANT,
+          roles: [UserRole.APPLICANT],
           status: UserStatus.NONE,
           phoneNumber: phone,
           country,