Update schema.sql to reflect latest role privileges and names