feat(policy): add the analyst role below member - #2543

🟡 Confidence 6/10 · needs attention. Held at 6 because a correctness warning is open.
_{1 warning −1 · tests covered · risk high −1}

Adds an analyst role below member and makes an unknown Clerk role read as analyst instead of member, with an empty role list still reading as member. The ladder change is sound and well tested; the Members page still mislabels the role until #2549.

• Role gains analyst at rank 0, below member
• roleOf reads an unknown Clerk role as analyst, not member
• highestRole takes Arr.max(byRank); an empty role list still reads as member
• holdersPhrase("member") now names admins, engineers and members

Before merge

• Manual · Create the org:analyst Clerk org role before #2549 assigns it: roleOf matches the key exactly

Still open from earlier reviews

• 🟠 Warning · F1 · An observer member renders as Member in the Members page and cannot be promoted to member · packages/domain/src/policy/roles.ts:46

_{6fab3c2 · Reply "won't fix" to dismiss a finding, or mention @maple-review-bot to ask about one.}