Add RBAC support with roles, permissions, and session management. Implement middleware for authentication and CSRF protection. Enhance audit logging with additional fields. Update HTTP handlers and routes for new features.

internal/http/app.go

@@ -4,7 +4,9 @@ import (
 	"database/sql"
 	"net/http"
 
+	"github.com/example/storage-appliance/internal/infra/osexec"
 	"github.com/example/storage-appliance/internal/service"
+	"github.com/example/storage-appliance/internal/service/storage"
 )
 
 // App contains injected dependencies for handlers.
@@ -15,4 +17,8 @@ type App struct {
 	JobRunner  service.JobRunner
 	HTTPClient *http.Client
 	StorageSvc *storage.StorageService
+	ShareSvc   service.SharesService
+	ISCSISvc   service.ISCSIService
+	ObjectSvc  service.ObjectService
+	Runner     osexec.Runner
 }