feat: phase 3 - field-level permissions with plugin field definitions, service-layer filtering, 20 core field definitions

app/routes/roles.py

@@ -12,6 +12,7 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from app.core.audit import log_audit
 from app.core.auth import get_redis
 from app.core.db import get_db
+from app.core.permission_registry import get_permission_registry
 from app.core.permissions import invalidate_all_user_permissions
 from app.deps import require_permission
 from app.models.plugin import Plugin as PluginModel
@@ -108,6 +109,7 @@ async def list_permissions(
         "system": SYSTEM_PERMISSIONS,
         "plugins": plugin_perms,
         "all": SYSTEM_PERMISSIONS + plugin_perms,
+        "field_definitions": get_permission_registry().get_all_field_definitions(),
     }