LCFS - Update the Organization type and associated roles

**Description:**
Update the Organization type select list on the New/Edit Organization page and implement role filtering on the BCeID Edit User page based on the selected roles.

The “Manage users” and "Signing authority" roles will remain available to all organization types.

More than one Organization type will be able to be assigned to have more clarity on an organizations functions in the market.

Selected Roles will determine which roles are available to the organization to assign their users. Certain roles are not appropriate to certain org types but this will be at the discretion of the analyst setting up the organization. Changes can be made at any time. If IDIR remove a role from the list, users in that organization will no longer keep that role, it will be removed automatically.

**Wireframe:**
[Updated Organization types and associated roles](https://preview.uxpin.com/7264e34749e7af420559b8cfc0ca8001c76db3ec#/pages/225283940/simulate/no-panels)

**Purpose and benefit to user:**
Improves data integrity and user experience by ensuring that only relevant roles are assignable based on an organization’s function.

**Acceptance Criteria:**
- [ ] Organization type select list options are updated to checkbox options on the New/Edit Organization page as follows:
- Fuel supplier
- Exempted supplier
- Credit transfer
- Aggregator
- Fuel producer
- Initiative agreement holder/applicant
- [ ] Roles available checkbox options to enable BCeID users to assign, as follows:
- Compliance reporting
- Credit transfer
- CI applicant
- IA proponent
- [ ] On the BCeID Edit User page, available user roles are filtered based on the selected roles.
- [ ] The “Manage users” and "Signing authority" roles are always available regardless of organization type(s)
- [ ] Users cannot assign roles that are not permitted for the selected organization type(s)
- [ ] Existing valid role assignments remain unchanged for current users
- [ ] System prevents saving a user if an invalid role is selected for the organization type(s)
- [ ] Changes apply consistently for both IDIR and BCeID users accessing the Edit User page
- [ ] Behaviour is enforced both in the UI and backend validation

**Development Checklist:**
- [ ] Update organization type values and labels in the Organization form
- [ ] Update Organization type from single select list, to multiple checkbox options
- [ ] Implement frontend role selection checkbox options
- [ ] Implement validation to enforce role restrictions on BCeID Edit user page
- [ ] Handle existing user records and validate against new rules (no breaking changes)
- [ ] Confirm behaviour across IDIR and BCeID user contexts

**Notes:**
- Roles are the primary mechanism for controlling permissions in the LCFS Portal, so this introduces a new constraint with assigned role availability