v0.1.2 — RBAC sync registers after CLI boot

RBAC declares that it boots after optional naf/cli, so its sync command is registered whenever CLI is installed. The framework ignores this edge if CLI is absent.

Contributor and README guidance now point to the maintained documentation, and package CI runs the test and style checks. RBAC APIs and grants are unchanged. CI passed on the release commit.