feat: RPM/DEB packaging, role management UI, smart PI detection

Packaging:
- Proper slurmledger.spec file (extracted from Makefile inline)
- Release workflow installs rpmbuild + dpkg-dev for real packages
- RPM includes python3-pymysql + python3-reportlab as Requires
- DEB includes config files in /etc/slurmledger/

Role Management UI:
- User Roles tab in Administration with chip/tag interface
- Add/remove users from Admin, Finance, PI roles
- Root always defaults to admin (hardcoded, no config needed)
- Role descriptions help table

Smart PI Detection:
- SLURM account prefix matching (e.g., project_ucm_{username})
- Unix group prefix matching (e.g., ucm_{username})
- Configurable prefixes in Role Management UI
- Auto-preview shows what the pattern matches
- Falls back to sacctmgr coordinator check
- Supports sites where PI=owner of matching SLURM account/group
- Users can be in multiple groups (all methods checked)

Author: Sqoia Dev Agent

.github/workflows/release.yml

@@ -24,6 +24,10 @@ jobs:
           python-version: '3.x'
       - name: Install deps
         run: pip install pymysql reportlab pytest
+      - name: Install packaging tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y rpm rpmbuild dpkg-dev fakeroot
       - name: Build
         run: make build
       - name: Test
@@ -34,17 +38,19 @@ jobs:
           git config user.email "github-actions@github.com"
           git tag v${{ github.event.inputs.version }} || true
           git push origin v${{ github.event.inputs.version }} || true
-      - name: Package
-        run: |
-          make rpm || true
-          make deb || true
+      - name: Build RPM
+        run: make rpm
+      - name: Build DEB
+        run: make deb
       - name: Publish Release
         uses: softprops/action-gh-release@v2
         with:
           tag_name: v${{ github.event.inputs.version }}
           name: SlurmLedger v${{ github.event.inputs.version }}
           generate_release_notes: true
           files: |
+            rpmbuild/RPMS/**/*.rpm
+            slurmledger_*.deb
             dist/**/*
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Makefile

@@ -57,16 +57,19 @@ rpm: package
 >rm -rf rpmbuild
 >mkdir -p rpmbuild/BUILD rpmbuild/RPMS rpmbuild/SOURCES rpmbuild/SPECS rpmbuild/SRPMS
 >cp slurmledger-$(VERSION).tar.gz rpmbuild/SOURCES/
->printf 'Summary: SlurmLedger\nName: slurmledger\nVersion: $(VERSION)\nRelease: 1\nLicense: MIT\nSource0: %%{name}-%%{version}.tar.gz\nBuildArch: noarch\nRequires: cockpit\nRequires: python3\nRequires: python3-pymysql\nRequires: python3-reportlab\n%%description\nSlurmLedger Cockpit plugin\n%%prep\n%%setup -q\n%%build\n%%install\nmkdir -p %%{buildroot}/usr/share/cockpit/slurmledger\ncp -a * %%{buildroot}/usr/share/cockpit/slurmledger/\nmkdir -p %%{buildroot}/etc/slurmledger\ncp rates.json %%{buildroot}/etc/slurmledger/rates.json\ncp institution.json %%{buildroot}/etc/slurmledger/institution.json\n%%files\n/usr/share/cockpit/slurmledger\n%%config(noreplace) /etc/slurmledger/rates.json\n%%config(noreplace) /etc/slurmledger/institution.json\n' > rpmbuild/SPECS/slurmledger.spec
+>sed "s/%{version}/$(VERSION)/g" slurmledger.spec > rpmbuild/SPECS/slurmledger.spec
 >$(RPMBUILD) --define "_topdir $(PWD)/rpmbuild" -bb rpmbuild/SPECS/slurmledger.spec
 
 deb: package
 >rm -rf debbuild
 >mkdir -p debbuild/usr/share/cockpit/slurmledger
 >cp -a $(DIST)/* debbuild/usr/share/cockpit/slurmledger/
+>mkdir -p debbuild/etc/slurmledger
+>cp $(DIST)/rates.json debbuild/etc/slurmledger/rates.json
+>cp $(DIST)/institution.json debbuild/etc/slurmledger/institution.json
 >mkdir -p debbuild/DEBIAN
->echo "Package: slurmledger\nVersion: $(VERSION)\nSection: admin\nPriority: optional\nArchitecture: all\nMaintainer: Unknown\nDepends: cockpit\nDescription: SlurmLedger Cockpit plugin" > debbuild/DEBIAN/control
->dpkg-deb --build debbuild slurmledger_$(VERSION)_all.deb
+>printf 'Package: slurmledger\nVersion: %s\nSection: admin\nPriority: optional\nArchitecture: all\nMaintainer: SlurmLedger Contributors\nDepends: cockpit, python3, python3-pymysql, python3-reportlab\nDescription: SlurmLedger Cockpit plugin\n HPC cost management for SLURM clusters.\n' "$(VERSION)" > debbuild/DEBIAN/control
+>fakeroot dpkg-deb --build debbuild slurmledger_$(VERSION)_all.deb
 >rm -rf debbuild
 
 check:

slurmledger.spec

@@ -0,0 +1,37 @@
+Summary:        SlurmLedger Cockpit plugin for SLURM job cost tracking
+Name:           slurmledger
+Version:        %{version}
+Release:        1%{?dist}
+License:        MIT
+BuildArch:      noarch
+Source0:        %{name}-%{version}.tar.gz
+
+Requires:       cockpit
+Requires:       python3
+Requires:       python3-pymysql
+Requires:       python3-reportlab
+
+%description
+SlurmLedger is a Cockpit plugin that provides HPC cost management for SLURM
+clusters. It tracks job costs, generates invoices, manages allocations, and
+provides role-based dashboards for admins, finance staff, PIs, and members.
+
+%prep
+%setup -q
+
+%build
+# Nothing to compile — static web assets and Python scripts
+
+%install
+install -d %{buildroot}/usr/share/cockpit/%{name}
+cp -a * %{buildroot}/usr/share/cockpit/%{name}/
+install -d %{buildroot}/etc/%{name}
+cp rates.json %{buildroot}/etc/%{name}/rates.json
+cp institution.json %{buildroot}/etc/%{name}/institution.json
+
+%files
+/usr/share/cockpit/%{name}
+%config(noreplace) /etc/%{name}/rates.json
+%config(noreplace) /etc/%{name}/institution.json
+
+%changelog