pub const MZ_JWT_SYNC_ROLE_ID: RoleId;
Sentinel role ID for JWT group-sync-managed role memberships. Not a login role — exists only to distinguish sync grants from manual grants.