Add role_write permission to permissions table and update migrations. Update e2e tests to use DB integration and seed permissions. Add seedPermissions helper.
Handler is static (no DB), tests verify the 9 known permissions are returned with correct id/nom shapes.