Get User Role From Id Token

Return the role for the authenticated user using an Okta ID token.

Accepts the Okta ID token in the Authorization Bearer header. Mirrors /self/role but uses the Okta ID token issuer so that integrations such as OpenBB workspace widgets can check the caller's role without a regular API Bearer token.

Note: require_permissions cannot be used here as a route dependency because it internally calls get_user_from_token (regular JWT Bearer), which rejects Okta ID tokens. The role response is inherently tied to the authenticated user, so no additional permission gate is needed.