Add the GET /api/roles endpoint