- RolesAndPermissionsSeeder: seed roles for ALL academies (not just hardcoded 'el-captain' slug)
- PermissionSeeder: assign permissions to all role instances per slug (across academies)
- DatabaseSeeder: look for owner role in user's academy first, always set is_super_admin

Root cause: wizard-created academy had different slug than seeder expected, so roles/permissions
were never created for it, leaving the admin user with no permissions (403 on dashboard).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>