iEduPortal Stage 40 — Permissions / Capabilities API

GET /api/v1/permissions/
Authorization: Bearer <access_token>

Returns the authenticated user's account type, role, and application capabilities for mobile/web clients.
Read-only. No schema changes. No credentials returned.