fix: RBAC policies page role handling and permission gates

- Read policy role_id from top-level field instead of conditions object
- Use policy.role_name for display, remove conditions.role_id lookup
- Remove duplicate role_id injection into conditions payload on submit
- Fix PermissionGate strings: policies:* -> roles:* to match backend
- Remove redundant client-side status filtering in audit log (already
  filtered server-side)

src/pages/AdminAuditLog.tsx

@@ -476,11 +476,8 @@ export default function AdminAuditLog() {
     setPage(0);
   }, []);
 
-  // Filter status entries client-side (status is derived from details, not a backend field)
-  const filteredEntries = useMemo(() => {
-    if (!appliedFilters.status) return entries;
-    return entries.filter((entry) => entry.status === appliedFilters.status);
-  }, [entries, appliedFilters.status]);
+  // Status is filtered server-side via query params
+  const filteredEntries = entries;
 
   const hasActiveFilters = useMemo(() => {
     return (