[Feature] Moderator role — set via admin API

[iiamlewis]

Overview

Introduce a moderator role that can be assigned and revoked by an admin (or above) via the admin API. Moderators get access to the moderation panel but have no access to monetary, billing, or financial sections of the admin interface.

Scope

• New moderator role in the user role hierarchy (below admin, above standard user)
• Assignable and revocable via admin API by any user with admin role or above
• Moderator role grants access to the moderation panel only
• No access to: payment data, subscription status, transaction history, Stripe data, or any monetary section

Acceptance criteria

• moderator role exists in the role system
• Admin can assign moderator role via admin API
• Admin can revoke moderator role via admin API
• Moderator role grants access to moderation panel
• Moderator role explicitly denied access to all monetary/billing sections

Security notes

• Moderators must never be able to escalate their own privileges
• All moderator actions should be logged with timestamp and moderator ID

[iiamlewis]

On the panel now