Migrate React SDK and Admin SDK to use new role-based RPCs

[whoAbhishekSah]

Context

Once the backend RPCs from #1459 and #1461 are implemented, both SDKs need to stop using policy RPCs (listPolicies, deletePolicy, createPolicy, createPolicyForProject) for member management and switch to the new role-based RPCs.

React SDK changes

File	Current	Replace with
web/sdk/react/views/members/member-columns.tsx	listPolicies → deletePolicy x N → createPolicy	SetOrganizationMemberRole
web/sdk/react/views/projects/details/project-member-columns.tsx	listPolicies → deletePolicy x N → createPolicy	SetProjectMemberRole
web/sdk/react/views/projects/details/project-members.tsx	createPolicyForProject	SetProjectMemberRole
web/sdk/react/views/projects/details/remove-project-member-dialog.tsx	listPolicies → deletePolicy x N	RemoveProjectMember
web/sdk/react/views/api-keys/list/add-service-account-dialog.tsx	createPolicyForProject	SetProjectMemberRole
web/sdk/react/views/api-keys/details/manage-service-user-projects-dialog.tsx	createPolicyForProject / listPolicies → deletePolicy x N	SetProjectMemberRole / RemoveProjectMember

Admin SDK changes

File	Current	Replace with
web/sdk/admin/components/AssignRole.tsx	listPolicies → deletePolicy x N → createPolicy x N	SetOrganizationMemberRole
web/sdk/admin/views/organizations/details/projects/members/assign-role.tsx	listPolicies → deletePolicy x N → createPolicy x N	SetProjectMemberRole
web/sdk/admin/views/organizations/details/projects/members/remove-member.tsx	listPolicies → deletePolicy x N	RemoveProjectMember
web/sdk/admin/views/organizations/details/projects/use-add-project-members.tsx	createPolicy	SetProjectMemberRole

Additional SDK fixes

• Gate org role-change UI on policymanage instead of update (or align backend to check update)
• Refresh permissions after role changes (currently checked once on page load)
• Org members page: call listOrganizationRoles alongside listRoles so custom org roles appear in the role-change dropdown

Depends on

• Add SetOrganizationMemberRole RPC to replace client-side policy manipulation #1459 — SetOrganizationMemberRole backend RPC
• Add high-level RPCs for project member management to remove client-side policy manipulation #1461 — SetProjectMemberRole and RemoveProjectMember backend RPCs

[whoAbhishekSah]

@rsbh @ravisuhag This is the final state we will reach once we have completed the dependent tasks.

[rsbh]

@whoAbhishekSah How does Set Role work? Is it like upsert?
We have 2 use cases: adding a user or updating a user role.
Will Set Role RPCs handle both cases ?

[whoAbhishekSah]

Yes, it's an upsert. Both add and role change are handled by the same RPC:

• Add member: no existing policies for this user on the resource → creates one with the given role
• Change role: existing policies found → deletes them, creates new one with the given role

Same code path, just step 1 (delete old policies) is a no-op when there's nothing to delete.

This matches the current SDK behavior — when adding a project member, it calls createPolicyForProject with a hardcoded viewer role (one policy). When changing roles, it deletes all existing policies then creates one. Both result in exactly one role per user per resource(org/project).