Creates a new RBAC role or updates an existing role with the same name. When a role is modified, all active sessions of users assigned to that role are automatically invalidated, and the RBAC API key hashmap is cleared to enforce new permissions immediately.