Run: `view-as-role-first`

`run.md`

change: apps/web View As menu: two shapes branching on the tenant's isDemo flag (demo = one flat roster of every person; standard = bare-role personas + per-role submenus) → one list on every tenant — the roles first, then the people who hold the chosen role, with "Role template only" at the foot of each role. isDemo now only sets the emulating control's register (presenter chrome vs amber audit warning).
note: merged main mid-lane — the floating ViewAsControl shipped there while this branch was open, so the new list went into that control rather than the retired sidebar switcher and banner.
changelog: not warranted — admin-only internal control, no customer-facing surface.