Two fixes for studio owners and staff:
- Permission changes apply right away. When you change a staff member's role, their app now picks up the new permissions on the next refresh instead of keeping the old ones until something else changed on their profile.
- More reliable payment status. Paid, unpaid and awaiting-verification states for passes and orders are now read from one single record, so lists, reports and pass details always agree on a purchase's payment status.
