feat(rbac): integrate RbacService into AuthService login, update JWT payload

backend/src/auth/strategies/jwt.strategy.ts

@@ -14,6 +14,10 @@ export class JwtStrategy extends PassportStrategy(Strategy) {
   }
 
   async validate(payload: any) {
-    return { id: payload.sub, username: payload.username, role: payload.role };
+    return {
+      id: payload.sub,
+      username: payload.username,
+      permissions: payload.permissions || [],
+    };
   }
 }