Add the "device/enroll" to default roles

[codingllama]

What would you like Teleport to do?

Let users enroll their own devices by default.

There a few different ways this could go:

1. Exempt users of having device/enroll if auto-enrollment is enabled (like we do for device token creation)
2. Add the device/enroll to default roles

What problem does this solve?

Since #29606 Teleport effectively expects users to enroll their own devices, but that isn't a permission granted by default.

• 29606

If a workaround exists, please include it.

Edit the user's roles to include device/enroll, as desired.