How to set up the role matrix

Do not grant cashiers discount rights. The gate belongs on the server — hiding a button is not protection.

This is demo content created by the `site:seed` command.