snapshot: preserve role management and user lifecycle controls

backend/workflows/signals.py

@@ -0,0 +1,12 @@
+from django.db.models.signals import post_migrate
+from django.dispatch import receiver
+
+from .roles import ensure_bootstrap_role_assignments, ensure_role_groups
+
+
+@receiver(post_migrate)
+def workflows_post_migrate(sender, **kwargs):
+    if getattr(sender, 'name', '') != 'workflows':
+        return
+    ensure_role_groups()
+    ensure_bootstrap_role_assignments()