Association settings

Association profile, roles & permissions, custom domain, and billing tier. Scaffolded now; filled in alongside each feature sprint.

• Association profile and custom-domain aliases (president@, treasurer@ ...)
• Roles and granular permissions (model role -> permissions, not names)
• Subscription tier (Free / Board / Premium)