The roles a preview may be minted AS — the authenticated principals, EXCLUDING the login-less anonymous. This
is the ONE source for the deployed gate's allow-list AND for which demo users seed.sql seeds; keeping them equal
means a role can be previewed iff it is seeded iff the gate allows it (no allow-but-unseedable divergence).
The roles a preview may be minted AS — the authenticated principals, EXCLUDING the login-less
anonymous. This is the ONE source for the deployed gate's allow-list AND for which demo users seed.sql seeds; keeping them equal means a role can be previewed iff it is seeded iff the gate allows it (no allow-but-unseedable divergence).