RBAC Without the Framework Tax: A Pragmatic NextAuth Pattern

How to enforce role-based access at the route boundary without bloating every handler with permission checks.