Drexo v0.3.0 — Roles, scopes, per-role menus + personalization

Access becomes capability × scope, organisations create custom roles with their own menu, tag-based scope arrives, and everyone can personalize their navigation (favourites, hide-for-me). Navigation-visibility hardening.