feat: v6.1.0 granular permissions (page/collection/property ACL + groups + audit)

- Migration 18: 6 tables + 3 colonnes permission_type + indexes
- PermissionManager: heritage page->collection->workspace, least privilege, groups, cache 60s
- API /api/v2: pages/collections/properties/groups/users/audit (401/403/404/400)
- Guards board.py + collections.py (404/403, admin/owner bypass)
- Tests 21/21 (inherit/restricted/private, grant, revoke, batch, group, audit)
- Docs + ROADMAP + CHANGELOG + VERSION 6.1.0

app/main.py

@@ -45,6 +45,7 @@ from app.routers.github_routes import router as github_router
 from app.routers.imports import page_router as import_page_router
 from app.routers.imports import router as imports_router
 from app.routers.notifications import router as notifications_router
+from app.routers.permissions import router as permissions_router
 from app.routers.realtime import router as realtime_router
 from app.services.webhook_outbound import init_webhook_tables
 
@@ -108,7 +109,7 @@ async def lifespan(_app: FastAPI):
 
 app = FastAPI(
     title="FlowDeck",
-    version="6.0.0",
+    version="6.1.0",
     docs_url="/docs" if settings.log_level == "DEBUG" else None,
     redoc_url=None,
     lifespan=lifespan,
@@ -151,6 +152,7 @@ app.include_router(onboarding.router)
 app.include_router(sync.router)
 app.include_router(imports_router)
 app.include_router(import_page_router)
+app.include_router(permissions_router)
 
 app.mount("/static", StaticFiles(directory="static"), name="static")