Wire authz service into server, expose capabilities on /auth/me, and add project member management routes with owner/admin gates.
Wire authz service into server, expose capabilities on /auth/me, and add project member management routes with owner/admin gates.