fix: SonarQube - resolveRoles 4->3 returns (fusion superadmin conditions)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/Security/KeycloakAuthenticator.php

@@ -108,11 +108,7 @@ class KeycloakAuthenticator extends OAuth2Authenticator implements Authenticatio
      */
     private function resolveRoles(array $groups): array
     {
-        if (\in_array('superadmin', $groups, true)) {
-            return ['ROLE_ROOT'];
-        }
-
-        if (\in_array('super_admin_asso', $groups, true)) {
+        if (\in_array('superadmin', $groups, true) || \in_array('super_admin_asso', $groups, true)) {
             return ['ROLE_ROOT'];
         }