feat: security role privilege scaffold applier for pp-security-role-privilege

[zekelinAlex]

moves pp-security-role-privilege's post-action logic into the library. the GenerateRolePrivileges dotnet-run codegen is gone, the applier parses the privilege spec in-process (Newtonsoft is already a dependency of Serialization.Xml) and merges privileges into Roles/.xml idempotently, alphabetically sorted like the old script did. dispatcher key SecurityRolePrivilege.

semantics follow the TALXIS/tools-devkit-templates#152 fix rather than the old broken codegen:

• quoted and bare JSON specs both parse (the old pipeline died with CS1003 on the quoted form and the CLI rolled the whole scaffold back)
• the "type" key alias works and produces the proper prvAppendTo name instead of the garbage prvudpp_ one
• User/BusinessUnit/ParentChild map to Basic/Local/Deep, None omits the privilege, unknown type or level fails naming the valid values

parity sandbox (6 variants) matched the per-variant expectations one for one: the quoted-JSON call exists only in the updated run, level mapping corrected, update-in-place identical, alphabetical order kept.