Permission Architecture

Map Better Auth entrypoints, session behavior, and role-based middleware boundaries.