Returns a paginated list of roles. Scope the results with either resourceId (roles of a single resource) or integrationId (every role across all resources of an integration, in one paginated response — use this to avoid issuing one request per resource). At least one of the two is required; if both are provided, resourceId takes precedence. Optionally filter by externalId or search.