feat: bootstrap backend MVP and architecture docs

app/schemas/__init__.py

@@ -0,0 +1 @@
+"""Pydantic schemas."""

app/schemas/permissions.py

@@ -0,0 +1,31 @@
+from pydantic import BaseModel
+
+
+class PermissionGrantRequest(BaseModel):
+    authentik_sub: str
+    email: str | None = None
+    display_name: str | None = None
+    scope_type: str
+    scope_id: str
+    module: str
+    action: str
+
+
+class PermissionRevokeRequest(BaseModel):
+    authentik_sub: str
+    scope_type: str
+    scope_id: str
+    module: str
+    action: str
+
+
+class PermissionItem(BaseModel):
+    scope_type: str
+    scope_id: str
+    module: str
+    action: str
+
+
+class PermissionSnapshotResponse(BaseModel):
+    authentik_sub: str
+    permissions: list[PermissionItem]

app/schemas/users.py

@@ -0,0 +1,8 @@
+from pydantic import BaseModel
+
+
+class UserUpsertBySubRequest(BaseModel):
+    sub: str
+    email: str | None = None
+    display_name: str | None = None
+    is_active: bool = True