chore(iac): drop deploy-role grants left unused by retiring the cleanup functions #1597

#1591 (#357) removed the GCP cleanup Cloud Function and the Azure cleanup Function App modules. Nothing in this repo now deploys a Cloud Function, Function App or App Service plan, so these CI/CD deploy-role grants look unused:

• GCP: roles/cloudfunctions.developer
• Azure: Microsoft.Web/serverFarms/* and Microsoft.Web/sites/*

Work:

• Confirm no remaining module or root needs them (including any root outside this repo that pointed at the deleted module paths).
• Remove the grants from the ci-cd-permissions roots.

This takes effect only when a human applies those roots.

Found in review of #1591. Low priority (least privilege).