Roles & Permissions

M1 · admin CRUD skeleton. Live-connected to /api/rbac/roles and /api/rbac/permissions. Editing is available for non-system roles; system roles are read-only (see docs/43 §4.5).