feat(auth): add role/permission management (backend + frontend)

- RoleService: CRUD, assign_permissions, get_role_permissions
- PermissionService: list all tenant permissions
- Role handlers: 8 endpoints with RBAC permission checks
- Frontend Roles page: table, create/edit modal, permission assignment
- Frontend Roles API: full CRUD + permission operations
- Routes registered in AuthModule protected_routes

crates/erp-auth/src/service/mod.rs

@@ -1,5 +1,7 @@
 pub mod auth_service;
 pub mod password;
+pub mod permission_service;
+pub mod role_service;
 pub mod seed;
 pub mod token_service;
 pub mod user_service;