* chore: static role assignment mapping Until a dynamic approach is created in the database, only org-admins can assign custom organization roles.
Editing custom org roles from hidden org cli command.
Removes our pseudo rbac resources like `WorkspaceApplicationConnect` in favor of additional verbs like `ssh`. This is to make more intuitive permissions for building custom roles. The source of truth is now `policy.go`
