Update API documentation and refine role permission filtering

- Enhanced API documentation for the `GET /roles` endpoint to clarify the `permissionIds` query parameter, specifying that it now accepts a repeated Guid to match roles with any of the given permissions.
- Refined the role permission filtering logic in `RoleService` to improve performance and accuracy by selecting role IDs based on the provided permission IDs, ensuring only relevant roles are returned in the query.

Author: APK-Arjun-Developer

docs/API.md

@@ -289,7 +289,7 @@ Requires `X-Tenant-Id` header for SystemAdmin. Custom roles only — `SystemAdmi
 
 | Method | Path | Permission | Notes |
 |--------|------|------------|-------|
-| GET | `/roles` | `Roles.List` | List custom roles. Query: `page`, `pageSize`, `search` (name), `permissionIds` (Guid list), `sortBy` (`name`), `sortOrder` (`asc`\|`desc`) |
+| GET | `/roles` | `Roles.List` | List custom roles. Query: `page`, `pageSize`, `search` (name), `permissionIds` (repeated Guid — matches roles having **any** of the given permissions), `sortBy` (`name`), `sortOrder` (`asc`\|`desc`) |
 | GET | `/roles/{name}` | `Roles.View` | Get role details by name |
 | GET | `/roles/current` | `Roles.View` | Caller's own role |
 | POST | `/roles` | `Roles.Create` | Create custom role with permissions |

src/Infrastructure/Roles/RoleService.cs

@@ -63,8 +63,13 @@ public async Task<PagedResponse<RoleResponse>> GetRolesAsync(
 
         if (permissionIds is { Count: > 0 })
         {
-            query = query.Where(r => _context.RolePermissions
-                .Any(rp => rp.RoleId == r.Id && permissionIds.Contains(rp.PermissionId)));
+            var selectedPermissionIds = permissionIds.ToList();
+            var roleIdsWithPermission = _context.RolePermissions
+                .Where(rp => selectedPermissionIds.Contains(rp.PermissionId))
+                .Select(rp => rp.RoleId)
+                .Distinct();
+
+            query = query.Where(r => roleIdsWithPermission.Contains(r.Id));
         }
 
         var totalCount = await query.CountAsync();