authorization 2

• Roles changed, but the old ones kept working for 30 minutes: putting a permission version in the JWT Nov 3, 2026
• Adding circuit breakers to internal service calls, and switching permission checks from fail-open to fail-closed Nov 2, 2026