Give trusted apps the user's role

Anikeen ID now sends trusted apps the user's role (admin or user) in
GET v1/user, a user read by ID and user.updated, so an app like the
Console can take its admins from Anikeen ID. Enums\Role, the Socialite
user's role and Resources\User::role()/isAdmin() expose it.

tests/Id/UserRoleTest.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace Anikeen\Id\Tests;
+
+use Anikeen\Id\AnikeenId;
+use Anikeen\Id\Enums\Role;
+use Anikeen\Id\Resources\User;
+use Anikeen\Id\Socialite\Provider;
+use Illuminate\Http\Request;
+use ReflectionMethod;
+
+/**
+ * The user's role, seen by trusted apps only: at sign-in, read by ID and in user.updated.
+ */
+class UserRoleTest extends TestCase
+{
+    private function socialiteUser(array $raw): \SocialiteProviders\Manager\OAuth2\User
+    {
+        $provider = new Provider(Request::create('/'), 'client', 'secret', 'https://app.test/callback');
+        $map = new ReflectionMethod($provider, 'mapUserToObject');
+
+        return $map->invoke($provider, $raw);
+    }
+
+    public function test_the_socialite_user_carries_the_role(): void
+    {
+        $raw = ['id' => '01JUSER', 'username' => 'ada', 'name' => 'Ada', 'email' => 'ada@example.com', 'avatar' => null];
+
+        $this->assertSame(Role::ADMIN, $this->socialiteUser([...$raw, 'role' => 'admin'])->role);
+        // apps that aren't trusted never get it
+        $this->assertNull($this->socialiteUser($raw)->role);
+    }
+
+    public function test_a_user_read_by_id_has_the_role(): void
+    {
+        $this->respond(200, ['data' => ['id' => '01JUSER', 'name' => 'Ada', 'role' => 'admin']]);
+
+        $user = app(AnikeenId::class)->findUserById('01JUSER');
+
+        $this->assertSame(Role::ADMIN, $user->role());
+        $this->assertTrue($user->isAdmin());
+    }
+
+    public function test_the_webhook_object_has_it_for_trusted_apps_only(): void
+    {
+        $trusted = new User(['object' => 'user', 'id' => '01JUSER', 'version' => 3, 'role' => 'user']);
+        $other = new User(['object' => 'user', 'id' => '01JUSER', 'version' => 3]);
+
+        $this->assertSame(Role::USER, $trusted->role());
+        $this->assertFalse($trusted->isAdmin());
+        $this->assertNull($other->role());
+        $this->assertFalse($other->isAdmin());
+        $this->assertSame([Role::ADMIN, Role::USER], Role::all());
+    }
+}