chore: add display names and descriptions to remaining system roles

[kevwilliams]

Summary

• Adds kubernetes.io/display-name and kubernetes.io/description annotations to 46 roles missed in #bda5436
• Covers IAM platform access approvals/rejections/invitations, IAM roles, user deactivations/invitations, notification contacts/groups/emails, quota service roles (quota-admin, quota-manager, quota-operator), and organization-creator
• Two roles that already had description (iam-user-preferences-manager, iam-user-self-manage) received only the missing display-name

Test plan

• Verify annotations are present on all updated roles with kubectl get roles -n datum-cloud -o yaml and kubectl get roles -n milo-system -o yaml
• Confirm no role is missing either annotation after this + the previous commit

[github-actions]

🤖 I automatically added missing newlines at the end of 4 file(s) in this PR.

All files should now end with a newline character as per coding standards.

[cla-assistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ kevwilliams
❌ github-actions[bot]
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[cla-assistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ kevwilliams
❌ github-actions[bot]
_{You have signed the CLA already but the status is still pending? Let us recheck it.}