RBAC Is Technical Debt: Zanzibar-Style Authorization in TypeScript

How I rebuilt permissions the way Google runs Drive and YouTube, with Ory,Keto, and NestJS.