Get the caller’s OWN role in a community (null when not a member)

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.