fix: use wildcard to filter reserved roles

[sweatybridge]

What kind of change does this PR introduce?

Bug fix

What is the new behavior?

Prevents future regressions in case we add managed roles.

Additional context

Add any other context or screenshots.

[coveralls]

Pull Request Test Coverage Report for Build 21513383911

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 1 of 1 (100.0%) changed or added relevant line in 1 file are covered.
• 5 unchanged lines in 1 file lost coverage.
• Overall coverage decreased (-0.02%) to 55.46%

---

Files with Coverage Reduction	New Missed Lines	%
internal/gen/keys/keys.go	5	12.9%

Totals
Change from base Build 21508511524:	-0.02%
Covered Lines:	7110
Relevant Lines:	12820

---

💛 - Coveralls