Multi-role members, round detail UI overhaul, dashboard jury progress, and submit bug fix

- Add roles UserRole[] to User model with migration + backfill from existing role column
- Update auth JWT/session to propagate roles array with [role] fallback for stale tokens
- Update tRPC hasRole() middleware and add userHasRole() helper for inline role checks
- Update ~15 router inline checks and ~13 DB queries to use roles array
- Add updateRoles admin mutation with SUPER_ADMIN guard and priority-based primary role
- Add role switcher UI in admin sidebar and role-nav for multi-role users
- Remove redundant stats cards from round detail, add window dates to header banner
- Merge Members section into JuryProgressTable with inline cap editor and remove buttons
- Reorder round detail assignments tab: Progress > Score Dist > Assignments > Coverage > Jury Group
- Make score distribution fill full vertical height, reassignment history always open
- Add per-juror progress bars to admin dashboard ActiveRoundPanel for EVALUATION rounds
- Fix evaluation submit bug: use isSubmitting state instead of startMutation.isPending

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/lib/auth-redirect.ts

@@ -19,10 +19,11 @@ export async function requireRole(...allowedRoles: UserRole[]) {
     redirect('/login')
   }
 
-  const userRole = session.user.role
+  // Use roles array, fallback to [role] for stale JWT tokens
+  const userRoles = session.user.roles?.length ? session.user.roles : [session.user.role]
 
-  if (!allowedRoles.includes(userRole)) {
-    const dashboard = ROLE_DASHBOARDS[userRole]
+  if (!allowedRoles.some(r => userRoles.includes(r))) {
+    const dashboard = ROLE_DASHBOARDS[session.user.role]
     redirect((dashboard || '/login') as Route)
   }