Permissions for each product type

[tsdk02]

As part of introducing modular product types (e.g., Payments, Recon, Vault), permissions should be scoped specifically to each product, ensuring that access is properly segregated. For example, a user with access to the "Recon" module shouldn't automatically receive write permissions for "Payments" unless explicitly granted.