feat: restrict admin role assignment to the privileged roles

src/Controller/Admin/User/EditController.php

@@ -45,6 +45,7 @@ class EditController extends AbstractController
                 return $this->render('admin/user/modal_edit.html.twig', [
                     'user' => $user,
                     'form' => $form,
+                    'syncedRoles' => Role::syncedOnly($user->getRoles()),
                 ]);
             }
 
@@ -66,6 +67,7 @@ class EditController extends AbstractController
         return $this->render('admin/user/modal_edit.html.twig', [
             'user' => $user,
             'form' => $form,
+            'syncedRoles' => Role::syncedOnly($user->getRoles()),
         ]);
     }