Roles: Select all ignores the permission filter and grants the whole category #1114

In the Roles create and edit editor, Select all ignores the permission filter. With a filter active, it grants every permission in the category, not only the ones on screen.

Repro (release/3.9.0 @2842adf0): Create a role. Filter on identity/roles. Click Select all under Identity. Result: the Identity summary shows "9 direct · 9 permissions", and Applications and Users are granted too.

Cause: RoleEditorSurface.razor (around line 147) calls SelectCategory(categoryResources), which uses GetCategoryResources instead of GetFilteredResources. The filtered category summary has the same problem and counts permissions that aren't visible.

Fix: Select all (and its counterpart Deselect) acts only on the resources currently visible. The category summary reflects what's visible. Add a component test that filters to identity/roles, clicks Select all, and asserts Applications and Users stay unchecked.

Target: release/3.9.0, then forward-port to elsa-core main src/studio, which has the same bug. Source: Roles UX review for 3.9 (items 7 and 14).