- Add `permission_node` DTO to link classic permissions with subuser-specific nodes. - Extend `authentication` to support subuser resolution via tokens. - Introduce route traits for permission evaluation with subuser context. - Update `requirePermission` and `hasPermission` to handle subuser grants dynamically. - Implement fallback mechanisms for customer number context in subuser permissions.