Allow non-filterable roles apply to previously filtered roles
New roles should be filterable by default.
[RM-1490] If a previously filtered role is now unfilterable, display it as unfiltered.
Visually display implicitly granted permissions.
task.jelly#permission unsuitable for Manage Roles since you need to have this permission on Jenkins, not just a folder.
[RM-1468] New property of a role that prevents it getting filtered
cloudbees-license 3.4 seems to make tests reliable.
Check/uncheck all should not touch $filterable.
Links to inherited groups were broken.