feat: better admin permissions (#5755)

* feat: add casbin admin permissions

* feat: improve audit logging to associate logs with actual operators and target users

* feat: enhance admin permissions and UI interactions for sensitive actions

* Refactor authz RBAC and tighten channel permissions

* Split channel authz field policy

* Address channel authz review findings

model/authz_role.go

@@ -0,0 +1,17 @@
+package model
+
+type AuthzRole struct {
+	Id          uint   `json:"id" gorm:"primaryKey;autoIncrement"`
+	Key         string `json:"key" gorm:"size:64;uniqueIndex;not null"`
+	Name        string `json:"name" gorm:"size:100;not null"`
+	Description string `json:"description" gorm:"type:text"`
+	BuiltIn     bool   `json:"built_in"`
+	Enabled     bool   `json:"enabled"`
+	Sort        int    `json:"sort"`
+	CreatedAt   int64  `json:"created_at" gorm:"autoCreateTime;column:created_at"`
+	UpdatedAt   int64  `json:"updated_at" gorm:"autoUpdateTime;column:updated_at"`
+}
+
+func (AuthzRole) TableName() string {
+	return "authz_roles"
+}