7fafeb433c
The rig's key roles are now settable; the test derives them with the production ApiKeyInterimRoleMapper from the same grants it installs. Claude-Session: https://claude.ai/code/session_01Ef2ozxS7QPanGT8uoATbTe