feat(security): add distributed authorization foundation

Tiku.Application/Security/ICapabilityAccessEvaluator.cs

@@ -0,0 +1,21 @@
+namespace Tiku.Application.Security;
+
+public enum CapabilityOperation
+{
+    Read,
+    Write
+}
+
+public interface ICapabilityAccessEvaluator
+{
+    Task<bool> IsAllowedAsync(
+        Guid tenantId,
+        string moduleCode,
+        CapabilityOperation operation,
+        CancellationToken cancellationToken = default);
+
+    Task<IReadOnlySet<string>> GetEnabledModulesAsync(
+        Guid tenantId,
+        CapabilityOperation operation = CapabilityOperation.Read,
+        CancellationToken cancellationToken = default);
+}