Setup: utente admin via web, ruoli e run-context con security-group, onboarding install/uninstall script

web/i18n/en.js

@@ -59,6 +59,7 @@ export default {
   'chat.thinking':      'Thinking…',
   'chat.attach':        'Attach files',
   'chat.new_session':   'New conversation',
+  'chat.security_group': 'Security group',
   'chat.collapse':      'Hide chat',
   'chat.close_tab':     'Close tab',
   'chat.privacy':       'Private to you',
@@ -306,6 +307,7 @@ export default {
   'setup.pw.mismatch': 'The two passwords do not match.',
   'setup.confirm':   'Confirm password',
   'setup.language':  'Interface language',
+  'setup.profile':   'Instance type',
   'setup.encrypt':   'Encrypt my conversation history',
   'setup.warn':      'your password derives the encryption key. If you forget it, your entire conversation history will be permanently lost — there is no recovery.',
   'setup.warn.strong': 'Warning:',
@@ -670,7 +672,9 @@ export default {
   'roles.form.id_ph':         'e.g. editor',
   'roles.form.id_desc':       'Lowercase, no spaces. Cannot be changed later.',
   'roles.form.label':         'Label',
-  'roles.form.group':         'Permission group',
+  'roles.form.group':         'Default security group',
+  'roles.form.allowed':       'Additional security groups',
+  'roles.form.allowed_hint':  'Groups this role may also switch to at runtime, on top of the default. Users pick from these in chat.',
   'roles.form.interface':     'Interface',
   'roles.form.interface_full':   'Full — all pages',
   'roles.form.interface_simple': 'Simple — chat only',