feat: add employee-only supervisor role nominated by crm selection 1487

tests/Controller/Api/UserinfoControllerTest.php

@@ -102,6 +102,20 @@ class UserinfoControllerTest extends TestCase
         self::assertSame([Role::EMPLOYEE, Role::TEAM_ADMIN], $claims['roles']);
     }
 
+    /**
+     * Same for ephub, which reads ROLE_SUPERVISOR out of this claim.
+     */
+    public function testSupervisorIsExportedOnceApproved(): void
+    {
+        $claims = $this->claims(['ROLE_OAUTH2_ROLES'], [
+            Role::USER,
+            Role::EMPLOYEE,
+            Role::SUPERVISOR,
+        ]);
+
+        self::assertSame([Role::EMPLOYEE, Role::SUPERVISOR], $claims['roles']);
+    }
+
     public function testUpstreamFailureIsReportedRatherThanAnswered(): void
     {
         $accountClient = $this->createStub(AccountClient::class);