Function derive_role_name 

pub fn derive_role_name(id: &str) -> String

Derive a display name from a role ID.

Title-cases each word (split on _, -, and __), including the discriminator suffix. "witness__1" → "Witness 1", "hsm_operator__primary" → "Hsm Operator Primary".