fix: resolve unit and integration test failures in adminfront

- Updated roles test to align with simplified RBAC model.
- Fixed AppLayout test navigation label order.
- Reverted TenantWorksmobilePage default tab to 'users' and updated Playwright tests to explicitly handle tab switching.
- Updated UserDetailPage tests to expect forbidden message for non-super admins.

adminfront/src/features/tenants/routes/TenantWorksmobilePage.tsx

@@ -194,7 +194,7 @@ export function TenantWorksmobilePage() {
   const tenantId = params.tenantId ?? HANMAC_FAMILY_TENANT_ID;
   const [orgUnitId, setOrgUnitId] = React.useState("");
   const [userId, setUserId] = React.useState("");
-  const [activeTab, setActiveTab] = React.useState("history");
+  const [activeTab, setActiveTab] = React.useState("users");
   const [userFilters, setUserFilters] = React.useState<
     WorksmobileComparisonFilter[]
   >(getDefaultUserComparisonFilters);