Granular roles for organizations and projects

Qlane now supports two layers of role-based access. At the organization level: Owner, Admin, Member, Viewer. At the project level: Admin, Editor, Viewer. Every dashboard surface — projects, environments, sessions, settings, billing — checks the appropriate role before letting an action through.

Membership and role changes sync from your identity provider via SCIM, and we revalidate permissions on every navigation so a role change takes effect without forcing a sign-out.

This is the foundation for everything coming next on the security and compliance side: audit logging, SSO enforcement, and SCIM provisioning all build on the same authorization layer.