The admin role always has every permission and cannot
be modified. This is a safety guarantee — no combination of edits can
lock your organisation out of its own system.
Built-in role — name and description are fixed in source, but you
can tune its permissions below. Saved changes persist in
role_matrix.json.