Get a single role by UUID
GET /rbac/roles/:identifier
Returns a role and its full permission list. Any member of the selected
entity may read it — no permission is required.
Request
Missing/invalid JWT or entity selection
Role not found (RBAC_ROLE_NOT_FOUND)