Any sass files in our app-interface configs should be self-serviceable.

Along the way, cicd/deploy.yml was left out of the permission config; fix the ui-dev role to include this file, under the appropriate change-type (seems like this should be saas-file-self-service).