Static PA_ADMIN 

pub static PA_ADMIN: &'static str

Keycloak role name that grants full admin access. The canonical definition lives in manta_shared::common::jwt_ops::PA_ADMIN; this re-export keeps service::authorization::PA_ADMIN callers compiling after the relocation. Keycloak role name that grants full admin access. Owned here so every workspace crate that decodes JWTs can read it without pulling manta-server as a dependency.