pub fn required_role(action: ActionKind) -> Option<Role>Expand description
Get the required role for an action.
This is the canonical action-to-role mapping shared across all executors.
Returns None for user-facing actions that don’t require a special role.