First-class permissions & policies
Replace blanket signers with clearly defined authority.
- Define roles instead of adding more signers
- Scope what each role is allowed to do
- Delegate specific actions safely without expanding key exposure
- TreasurerTransferSwapStake
- OperatorSwapBridge
- ReviewerView

