feat(auth): add module read/write admin RBAC

Introduce permission catalog, PermissionsGuard, JWT/me payload with
role+permissions, and gate all module controllers. Admins CRUD accepts
role/permissions with safety rules; migrate existing users to super_admin.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/sms/sms.module.ts

@@ -1,4 +1,5 @@
 import { Module } from '@nestjs/common';
+import { AuthModule } from '../auth/auth.module';
 import { NotificationsModule } from '../notifications/notifications.module';
 import { RemoteSmsAuthGuard } from '../auth/remote-sms-auth.guard';
 import { RemoteSmsController } from './remote-sms.controller';
@@ -6,7 +7,7 @@ import { SmsController } from './sms.controller';
 import { SmsService } from './sms.service';
 
 @Module({
-  imports: [NotificationsModule],
+  imports: [NotificationsModule, AuthModule],
   controllers: [SmsController, RemoteSmsController],
   providers: [SmsService, RemoteSmsAuthGuard],
   exports: [SmsService],