feat: add configurable role/permission system

app/main.py

@@ -36,6 +36,7 @@ from app.api.routers.webhooks import router as webhooks_router
 from app.api.routers.misc import router as misc_router
 from app.api.routers.monitor import router as monitor_router
 from app.api.routers.milestones import router as milestones_router
+from app.api.routers.roles import router as roles_router
 
 app.include_router(auth_router)
 app.include_router(issues_router)
@@ -46,6 +47,7 @@ app.include_router(webhooks_router)
 app.include_router(misc_router)
 app.include_router(monitor_router)
 app.include_router(milestones_router)
+app.include_router(roles_router)
 
 
 # Auto schema migration for lightweight deployments
@@ -87,7 +89,7 @@ def _migrate_schema():
 @app.on_event("startup")
 def startup():
     from app.core.config import Base, engine, SessionLocal
-    from app.models import models, webhook, apikey, activity, milestone, notification, worklog, monitor
+    from app.models import models, webhook, apikey, activity, milestone, notification, worklog, monitor, role_permission
     Base.metadata.create_all(bind=engine)
     _migrate_schema()