fix: improve keto sync reliability and initial rebac permissions for super admin

devfront/tests/devfront-security.spec.ts

@@ -32,7 +32,7 @@ test.describe("DevFront security and isolation", () => {
     ).toBeVisible();
   });
 
-  test("RBAC: non-AppManager user should not see private apps", async ({
+  test("RBAC: user without manage_all permission should not see private apps", async ({
     page,
   }) => {
     const state = {