Stop persisting roles to localStorage as authority; AdminSettingsModal reads and writes role matrices via /api/v1/admin/roles; hasPermission denies when capabilities are not loaded from /auth/me. Co-authored-by: Cursor <cursoragent@cursor.com>
Product UI no longer switches sessions locally; API clients attach Bearer tokens only and LocalAuthClient stays test-only outside the prod bundle.
Co-authored-by: Cursor <cursoragent@cursor.com>