Sync SWA roles with GitHub repo permissions