Make the admin group → capabilities editor a proper permissions screen: a checkbox per capability with a plain-language explanation of what it unlocks, reflecting the saved (synced) state and persisting on save.
The /admin/groups/[groupId] capabilities form already has checkboxes + short labels. Add a CAPABILITY_DESCRIPTIONS map (single source of truth alongside CAPABILITIES/CAPABILITY_LABELS) describing what each grant actually does in the explorer (admin / staff.audit / government), and render it under each checkbox so an admin can see the effect of each toggle. State reflects explorer_group_capability (current DB) and saves via the existing setGroupCapabilitiesAction.