chore: normalize casbin policy YAML key ordering

https://claude.ai/code/session_01WrcMNpLJxuKKFKPQ39h1rT

Author: claude

config/casbin/policy.yaml

@@ -1,17 +1,25 @@
 scopes:
-  client-a:
-    description: Client A
-    created_at: 2024-01-01T00:00:00Z
   client-b:
     description: Client B
     created_at: 2024-01-01T00:00:00Z
-  qa:
-    description: QA
+  client-a:
+    description: Client A
     created_at: 2024-01-01T00:00:00Z
   default:
     description: Default scope for unassigned apps
     created_at: 2024-01-01T00:00:00Z
+  qa:
+    description: QA
+    created_at: 2024-01-01T00:00:00Z
 roles:
+  viewer:
+    permissions:
+    - view
+    description: Read-only access
+  admin:
+    permissions:
+    - '*'
+    description: Full system access
   operator:
     permissions:
     - view
@@ -26,54 +34,46 @@ roles:
     - logs
     - create
     description: Developer access - all except destroy
-  viewer:
-    permissions:
-    - view
-    description: Read-only access
-  admin:
-    permissions:
-    - '*'
-    description: Full system access
 assignments:
-  identifier:hello-world:
+  dev:system:internal:
+  - role: admin
+    scopes:
+    - '*'
+  identifier:client-a:
   - role: developer
     scopes:
     - client-a
+  identifier:test-service:
+  - role: admin
+    scopes:
+    - client-a
     - client-b
     - qa
+    - default
   identifier:admin:
   - role: admin
     scopes:
     - client-a
     - client-b
     - qa
     - default
-  '*':
-  - role: viewer
-    scopes:
-    - default
-  identifier:client-a:
+  '@factorial.io':
   - role: developer
     scopes:
     - client-a
-  dev:system:internal:
-  - role: admin
-    scopes:
-    - '*'
-  identifier:test-service:
-  - role: admin
+    - client-b
+    - qa
+  identifier:hello-world:
+  - role: developer
     scopes:
     - client-a
     - client-b
     - qa
-    - default
   xxxstephan@factorial.io:
   - role: admin
     scopes:
     - '*'
-  '@factorial.io':
-  - role: developer
+  '*':
+  - role: viewer
     scopes:
-    - client-a
-    - client-b
-    - qa
+    - default