org_members.role already supports owner/admin/member. We need a viewer role for read-only seats and a UI to change roles + invite teammates.