Granular price list permissions

Tenants can now control access to price lists independently through dedicated role permissions. Price-list routes, creation actions, editing, and configurator surfaces are consistently gated by these permissions. Read-only users get a fully enforced read-only experience, including disabled grid editing and drag-fill interactions. The role editor also safely handles unknown resources returned by the API.