Provider-driven accessCentralize user roles, permission maps, and feature toggles in RoleGuardProvider.
Wildcards & matchingSupport global and prefix wildcards on role permissions, plus any vs all for lists.