feat(bicep): add all 682 Azure roles from rbaclookup module

Replaces hardcoded 38 roles with complete list extracted from
bicep/lookup/rbaclookup:2.x module.

Changes:
- Add scripts/extract_roles_from_rbaclookup.py to parse rbacLookup.bicep
- Generate ilsp/bicep_lsp/azure_roles.json with 682 role names
- Load roles dynamically in modules.py from JSON file
- Now supports ALL Azure built-in roles for autocomplete

Benefits:
- Complete Azure RBAC coverage (682 vs 38 roles)
- Easy to update when new roles are added to rbaclookup module
- Cleaner code (no giant hardcoded list in modules.py)

Usage to update roles:
  python3 scripts/extract_roles_from_rbaclookup.py /path/to/rbacLookup.bicep

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

scripts/extract_roles_from_rbaclookup.py

@@ -0,0 +1,70 @@
+#!/usr/bin/env python3
+"""
+Extract all Azure role names from rbacLookup.bicep and generate Python code
+for _KNOWN_ENUMS in modules.py.
+
+Usage:
+    python3 scripts/extract_roles_from_rbaclookup.py /path/to/rbacLookup.bicep
+"""
+
+import re
+import sys
+from pathlib import Path
+
+
+def extract_role_names(bicep_file: Path) -> list[str]:
+    """Extract all role names from the rbacLookup.bicep var roles = {...} block."""
+    content = bicep_file.read_text()
+
+    # Find the "var roles = {" block
+    roles_match = re.search(r'@export\(\)\s*var\s+roles\s*=\s*\{(.+?)\n\}', content, re.DOTALL)
+    if not roles_match:
+        raise ValueError("Could not find 'var roles = {' block in Bicep file")
+
+    roles_block = roles_match.group(1)
+
+    # Extract all role names (keys before the colon)
+    # Pattern: "  ROLE_NAME: 'guid'"
+    role_names = re.findall(r'^\s+([A-Z_]+):', roles_block, re.MULTILINE)
+
+    return sorted(role_names)
+
+
+def generate_python_code(role_names: list[str]) -> str:
+    """Generate Python code for _KNOWN_ENUMS["roles"]."""
+    lines = ['_KNOWN_ENUMS = {']
+    lines.append('    "roles": [')
+
+    for role in role_names:
+        lines.append(f'        "{role}",')
+
+    lines.append('    ],')
+    lines.append('    "roleDefinitionIds": [  # alias for roles')
+
+    for role in role_names:
+        lines.append(f'        "{role}",')
+
+    lines.append('    ],')
+    lines.append('}')
+
+    return '\n'.join(lines)
+
+
+if __name__ == "__main__":
+    if len(sys.argv) < 2:
+        print("Usage: extract_roles_from_rbaclookup.py /path/to/rbacLookup.bicep", file=sys.stderr)
+        sys.exit(1)
+
+    bicep_path = Path(sys.argv[1])
+    if not bicep_path.exists():
+        print(f"Error: File not found: {bicep_path}", file=sys.stderr)
+        sys.exit(1)
+
+    try:
+        roles = extract_role_names(bicep_path)
+        print(f"# Extracted {len(roles)} roles from {bicep_path.name}")
+        print(f"# Generated: {Path(__file__).name}\n")
+        print(generate_python_code(roles))
+    except Exception as e:
+        print(f"Error: {e}", file=sys.stderr)
+        sys.exit(1)