Signup Roles

The roles a newcomer can pick as their target on the signup form.

Unauthenticated by necessity: the person asking has no account yet, and the answer is the same list /jobs already publishes on the open internet. Nothing candidate-specific is in the response.

Behind _gate() like the rest of this router, so the surface appears and disappears as one feature. A failure returns an EMPTY list rather than a 500: the signup form degrades to "we could not load the roles, join anyway and pick later", which is strictly better than blocking a signup on a dropdown.