Cover custom org roles CRUD in org integration suite

[sdairs]

Summary

organization_roles_get_list, organization_role_post, organization_role_get, organization_role_patch, organization_role_delete have no live coverage.

Scope

• organization_roles_get_list — capture pre-test state for sanity assertions.
• organization_role_post — create a synthetic role named clickhousectl-it-role-{run_id}. Register for cleanup.
• organization_role_get — confirm the new role is returned and fields match the post body.
• organization_role_patch — modify a property of the role (description, permissions). Verify via subsequent get.
• organization_role_delete — delete. Verify via 404 on get.

Where this lands

• crates/clickhouse-cloud-api/tests/integration_org_test.rs (new phase)

Notes

• The role name must include ctx.run_id so concurrent CI runs don't collide.
• Custom roles don't need to be assigned to anyone to exercise CRUD — the secondary user is uninvolved.

Parent: #151