Permission strings: the single owner of their grammar, shared by the
platform and the guest SDK. Only the scope suffix has a grammar; the part
before @ is compared exactly as before scopes existed, so no role
string without @ changes meaning.
Route path patterns of routing: strict services: parsed once here and
shared by the service! macro, the deploy validator, the platform’s route
table and the OpenAPI generator.