permissions patching: given the current permissions configured for a role and the desired target permissions, figure out the necessary Roles mod calls for migrating the role permissions
use this for updating the GC DeFi preset and applying the new version to the karpatkey roles