pub async fn rbac_middleware( request: Request, next: Next, ) -> Result<Response, StatusCode>
RBAC middleware to enforce permissions on admin endpoints