Surface service account role in flow trigger and catalog UI

What does this MR do and why?

Surface the service account's project role in the Duo Agent Platform UI so users understand the access a flow or trigger runs with, and warn about unattended scheduled runs.

• Flow trigger form: shows the resolved service account role (e.g. Developer) beneath the flow selector (catalog mode) and the service account selector (manual mode). The role name links to the roles documentation.
• Schedule event type: adds a warning that scheduled runs have no human oversight and rely entirely on the service account. The schedule event type remains gated off (isAvailable: () => false) until the backend lands; this MR only prepares the UI.
• Catalog enable disclaimer: reworded to name the default Developer role, link it to the docs, and read as inline guidance rather than an alert.

References

• Backend plumbing for the schedule event type is in progress separately; this MR paves the way for it.

Screenshots or screen recordings

Before	After

How to set up and validate locally

Prerequisite: a top-level group with a Duo Agent Platform flow, and a project under it. Enabling the flow provisions a service account that is added to the project with the Developer role.

Catalog enable modal disclaimer

1. Go to the project's Automate > Flows page and select Enable flow from group.
2. In the modal, confirm the disclaimer names the default Developer role, links it to the docs, and reads as inline guidance (not an alert).

Flow trigger form — role hint

1. Go to /<group>/<project>/-/automate/triggers/new.
2. In catalog mode, select a flow. The service account role for the project renders below the selector and links to the roles docs.
3. Switch to manual mode and pick a service account; the same role hint renders below the picker.

Schedule access warning

1. The schedule event type is gated off (isAvailable: () => false), so it is not selectable in the UI yet. The warning is exercised by the ScheduleEventsConfiguration component specs. To preview it manually, temporarily flip isAvailable to () => true and select the Schedule event type.

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.