Fix SCIM role update

[fisx]

https://wearezeta.atlassian.net/browse/WPB-2959

reviewer: please read commit by commit.

without the fix, but with the test:

$ make ci-safe package=spar
[...]
  test-integration/Test/Spar/Scim/UserSpec.hs:1810:7:
  1) WireIdPAPIV1.Spar.Scim.User, PUT /Users/:id, updates role
       expected: Just RoleOwner
        but got: Just RoleMember

  To rerun use: --match "/WireIdPAPIV1/Spar.Scim.User/PUT /Users/:id/updates role/"

  test-integration/Test/Spar/Scim/UserSpec.hs:1810:7:
  2) WireIdPAPIV2.Spar.Scim.User, PUT /Users/:id, updates role
       expected: Just RoleOwner
        but got: Just RoleMember

  To rerun use: --match "/WireIdPAPIV2/Spar.Scim.User/PUT /Users/:id/updates role/"
[...]

with both:

$ make ci-safe package=spar
[...]
WireIdPAPIV1
  Spar.Scim.User
    PUT /Users/:id
      updates role [✔]
[...]

Checklist

• Add a new entry in an appropriate subdirectory of changelog.d
• Read and follow the PR guidelines

[fisx]

a few more spar tests are failing, but i think that's because the tests need fixing.

[battermann]

LGTM

[battermann]

I think this type annotation is not needed, is it a left over or is it meant for documenting the code?

[fisx]

both! :)