Merge IAM U4 role permission UI history onto Frontend main
Why: the U4 Frontend branch is 100 commits behind main, which now carries the shared document renderer delivery UI, two-trees project work and regulations citations (PR #106 merged asd562d6a); it conflicted in the API client and the admin sections. The user authorized syncing U4 after the renderer line on 2026-10-18. Evidence: content is the agent-exec transportcf07aef(cursor worker, unit frontend-iam-u4-onto-main-d562d6a-r1, run on a checkout whose tree equals main, receipt /tmp/cleanup-20261018/render/u4-frontend-onto-run.json, SELF), integrated with agent-exec apply onto df7818f; this merge (strategy ours) only records U4 commit05609ffas an ancestor and changes no content. Host review: U4's removal of the superseded RDM roles panel and main's move of RdmDutiesSection to duties/ are both kept; root administrators keep main's account creation and password reset panel under the U4 users section. Impact: the Python environment admin section becomes root-only like the other U4 system sections; AccountRecord gains a ManagedAccountRecord view type. Refs: Frontend maind562d6a, PR #106 Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in: