RBAC matrix
Own RBAC (no OPA, no CMS authz dependency) — placeholder, implementation blocked
UI pending spec build
Scaffold + data layer are in place. The full screen is implemented in the next pass against its spec.
CTL-FEAT-09 · docs/specs/features/rbac