feat(flow): unify member-group-permission admin workflow and docs

backend/app/schemas/permissions.py

@@ -1,3 +1,5 @@
+from datetime import datetime
+
 from pydantic import BaseModel
 
 
@@ -32,3 +34,23 @@ class PermissionItem(BaseModel):
 class PermissionSnapshotResponse(BaseModel):
     authentik_sub: str
     permissions: list[PermissionItem]
+
+
+class DirectPermissionRow(BaseModel):
+    permission_id: str
+    authentik_sub: str
+    email: str | None = None
+    display_name: str | None = None
+    scope_type: str
+    scope_id: str
+    system: str | None = None
+    module: str | None = None
+    action: str
+    created_at: datetime
+
+
+class DirectPermissionListResponse(BaseModel):
+    items: list[DirectPermissionRow]
+    total: int
+    limit: int
+    offset: int