Returns the next available role ID for creating a new role. IDs 0 (default) and 1 (unknown) are reserved for system default roles. Valid custom role IDs range from 2-255 (max 254 custom roles). The algorithm scans existing roles starting from the last assigned ID, wrapping from 255 back to 2 when necessary to find an unused slot.