feat(client): effective-permissions viewer on user detail page

- EffectivePermissionsView groups allowed/denied actions by permission
  group and renders them under the user's active role
- fetchUserAuthorization API + userKeys.authorization query key