Role-Based Access Control

Build the authorization engine behind every admin panel: roles that grant permissions, users assigned roles, role inheritance so an admin gets an editor's rights, wildcard permissions like `doc:*`, and explicit per-user denies that override everything.