Keep profile role display consistent with Django staff and superuser privileges

[tystar86]

Imported from Linear: TYS-166

Source: docs/developers/START_HERE.md → ## Common Pitfalls

A Django is_staff or is_superuser account is privileged on the backend even if Profile.role still says user, which can make UI role badges misleading.

Goal:

• Reduce confusion between backend authorization and displayed profile role state.
• Decide whether to sync these values automatically, surface the distinction in the UI, or both.

Acceptance ideas:

• Privileged accounts are not shown as ordinary users in ways that mislead contributors or testers.
• The relationship between Django auth flags and Profile.role is explicit.