erify-authorization

Patterns for implementing authorization in erify_api with current StudioMembership + AdminGuard behavior, plus planned RBAC references