Merge feature/permissions-hardening: RBAC hardening + B-lite + P0 UX
Phase A (security): permission registry, audit log on perm/feature changes,
token_version bump on permission changes.
B-lite: requireFeature middleware blocks API on disabled global flags.
P0 UX: search, modified-dot, confirm on critical perms, badge wording.
Conflict resolution: admin.js monolith was restructured into
frontend/js/admin/sections/* by feature/admin-redesign merge. P0 UX
edits (originally in monolith) were manually ported to:
- sections/permissions.js — modDot, confirm gate, filterPermissions
- sections/users.js — 'Инд.' → 'Индивидуально' badge in user-perms modal
admin.html search input + dot CSS auto-merged cleanly.
Maxim Dolgolyov
8269f5b145