feat(standards): add set_procedure_role to Authority

[onurinanc]

Summary

• Add set_procedure_role, which rewrites one entry of the procedure-roles map on a running RbacControlled account, with 0 unmapping the procedure back to ADMIN.
• Gate it on the emergency authority so it stays reachable while frozen and can carry its own role, and abort under OwnerControlled / AuthControlled, which have no roles map.
• Refuse to reassign the procedure's own root, so role management cannot be locked behind a memberless role.

Closes #3864.

[partylikeits1983]

LGTM! The authorization checks and frozen account behavior looks correct, I like the test coverage