Improve how user roles are managed and displayed on the admin page

Introduce separation of direct and inherited roles in user profiles and API responses. Modify the admin UI to disable the "order receiver" toggle when a role is inherited, providing a clearer user experience. Update API endpoints and schemas to reflect these changes, alongside locale updates for translated strings.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 77cfe984-2c65-4152-bb7a-0df28274fe66
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Event-Id: 33aee19f-8f0f-4399-98e0-39fe09a87e1b
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/c3c252e4-c83d-40ca-9fff-99a3ea60701e/77cfe984-2c65-4152-bb7a-0df28274fe66/m92e9kU
Replit-Helium-Checkpoint-Created: true

lib/api-spec/openapi.yaml

@@ -3291,6 +3291,16 @@ components:
           type: array
           items:
             type: string
+        directRoles:
+          type: array
+          items:
+            type: string
+          description: |
+            Roles assigned directly to the user (user_roles table only). The
+            `roles` field above is the effective set (direct + inherited via
+            group membership). The admin Users page uses the difference to
+            mark a role as "inherited from group X" and disables the toggle
+            so the admin doesn't try to remove a role that won't disappear.
         groups:
           type: array
           items: