Access Control
Internal users and roles. Roles will gate actions once sign-in is enabled.
AdminFull control, including access management.
QA LeadRun inspections, sign off QA gates.
AssemblyProvision hulls, install components, advance build states.
Read OnlyView the floor; no mutations.
Note: authentication is not yet wired. This roster is the source of truth NextAuth will check against later — editing it here has no security effect today.