Access-control review across our contract suite

Audit roles/permissions across 5 contracts: owner powers, role admin, and any missing modifiers. Deliver a permission matrix and the risky spots ranked.