Grant an operator role

Security and data protection: Grant an operator role. Starts when: Staff need a bank role. Steps: Platform owner grants explicit role; Expiry set; Receipt. Done when: Capabilities in GET /me reflect the role and the grant is receipted. Rules that apply: FCA SYSC 4; SM&CR.