Get Role Config

Today's blocks for the signed-in person, and which role they are.

⛔THE FOUR TILES ARE NOT IN HERE. GET /api/metrics/tiles already answers what a role is held to, for all eight roles, and this returns score: [] so the caller fills it from there. Two services computing one scorecard is the spaghetti this build has a CI gate about.

⛔ALWAYS THEIR OWN, NEVER SOMEBODY ELSE'S. There is no principal_id parameter and there is not going to be one: reading another person's standing used to be the mirror's question (mirror_service.py, coach- down / report-up / never-sideways), deleted 2026-09-25 as dead Today v3 code with no caller -- see this module's own docstring. If a "view someone else's standing" feature returns, the same access question (twice now a grant meant to gate it turned out to be held for an unrelated reason) needs deciding again, not copied from the deleted version without re-checking who actually holds which grant.