Export Permissions

Export all permission records as portable JSON (no UUIDs).

Use this to capture the current state before a migration, or to generate a golden config that can be imported into other environments.