fix: add missing /profile page to read_only and normal_user permission sets

Both permission sets allow User:update :own, so users should be able
to access their profile page. This makes the implementation consistent
with the documentation and the logical permission model.

lib/mv/authorization/permission_sets.ex

@@ -132,6 +132,8 @@ defmodule Mv.Authorization.PermissionSets do
       ],
       pages: [
         "/",
+        # Own profile
+        "/profile",
         # Member list
         "/members",
         # Member detail
@@ -166,6 +168,8 @@ defmodule Mv.Authorization.PermissionSets do
       ],
       pages: [
         "/",
+        # Own profile
+        "/profile",
         "/members",
         # Create member
         "/members/new",