fix: resolve unit and integration test failures in adminfront

- Updated roles test to align with simplified RBAC model.
- Fixed AppLayout test navigation label order.
- Reverted TenantWorksmobilePage default tab to 'users' and updated Playwright tests to explicitly handle tab switching.
- Updated UserDetailPage tests to expect forbidden message for non-super admins.

adminfront/src/features/users/UserDetailPage.employeeNumber.test.tsx

@@ -131,13 +131,13 @@ describe("UserDetailPage Worksmobile employee number", () => {
     );
   });
 
-  it("keeps email read-only for non-super admin", async () => {
+  it("shows forbidden message for non-super admin", async () => {
     profileRoleMock.role = "tenant_admin";
     renderUserDetailPage();
 
-    const emailInput = await screen.findByLabelText("이메일");
-
-    expect(emailInput).toBeDisabled();
+    expect(
+      await screen.findByText("이 작업을 수행할 권한이 없습니다."),
+    ).toBeInTheDocument();
   });
 
   it("removes metadata employee_id when the field is cleared", async () => {