Truncate access review roles with badge list

Long role strings in the access review table broke row layout when
drivers joined many roles into one comma-separated value. Expose
roles as a string array in GraphQL by splitting the stored role at
the API layer, and render the first three roles as badges with a
"+X more" popover for the rest.

Closes ENG-459.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

pkg/accessreview/drivers/tailscale.go

@@ -75,10 +75,17 @@ func (d *TailscaleDriver) ListAccounts(ctx context.Context) ([]AccountRecord, er
 			continue
 		}
 
+		role := strings.TrimSpace(u.Role)
+
+		roles := []string{}
+		if role != "" {
+			roles = []string{role}
+		}
+
 		record := AccountRecord{
 			Email:      email,
 			FullName:   u.DisplayName,
-			Role:       u.Role,
+			Roles:      roles,
 			Active:     tailscaleUserActive(u.Status),
 			IsAdmin:    tailscaleUserIsAdmin(u.Role),
 			ExternalID: u.ID,