feat: add enterprise Phase 1-4 feature flags and new permissions

apps/api/src/permissions.ts

@@ -20,6 +20,9 @@ const ROLE_PERMISSIONS: Record<Role, Permission[]> = {
     "features:manage",
     "system:health",
     "audit:read",
+    "compliance:manage",
+    "webhooks:manage",
+    "security:manage",
   ],
   editor: [
     "tools:use",

apps/api/src/plugins/auth.ts

@@ -211,6 +211,9 @@ export async function ensureBuiltinRoles(): Promise<void> {
         "features:manage",
         "system:health",
         "audit:read",
+        "compliance:manage",
+        "webhooks:manage",
+        "security:manage",
       ],
       isBuiltin: true,
     },