Get My Role Names

Names of the roles assigned to the current user (e.g. "full_user", "vendor_owner"). A standalone read so callers (role-gated routing, profile mutations) don't have to thread role_names through every response that happens to touch the user — see UserResponse, which intentionally omits it.