New /roles/matrix page shows all permissions as rows grouped by module
with Arabic labels, all roles as columns, and color-coded scope badges
(own/branch/academy/all). Includes module and role filtering, stats
per role, and click-to-cycle scope for custom roles. System roles are
read-only. Accessible from the roles list page via "المصفوفة" button.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>