- Updated role normalization tests to expect legacy roles mapped to 'user'. - Updated forbidden message tests to expect standard user guidance for legacy roles.