#2941 [comp] Production Deploy

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

---

Summary by cubic

Standardized finding status permissions. Members with finding:update can set ready_for_review; needs_revision and closed require finding:create or platform admin.

• Bug Fixes

  • Removed auditor-only restriction on ready_for_review in API and UI.
  • Status options and content editing now respect permissions (finding:update, finding:create) instead of raw role names.

• Refactors

  • Use RolesService to resolve permissions; add RolesModule to FindingsModule.
  • Change FindingsService.update to accept canCreateFindings; update admin controller call site.
  • Add unit tests for status transition rules.