feat(auth,roles): implement dynamic permission payload, role deletion guard, and user management APIs