Granular team permissions (viewer, editor, admin)

Add more granular permission levels — viewer, editor, and admin roles for team workspaces so you can control who can edit vs. who can only view drafts.