Hardened places workflow
This release clarifies places rights and checks to prepare pilot admin operations.
- Places mutations remain bounded server-side by role, permission, status and batch limit.
- The `moderator` role can contribute to the places workflow only in the authorized scope, without RBAC management or purge.
- Release checklists add a gate for filters, bulk actions, trash, audit and no places PII in logs.