Create the RBAC permission module that maps roles to permissions and provides a requirePermission middleware to replace requireAdmin. Update the test server to use requirePermission for the admin health check.
