Add role-based permissions

We would move our whole team over if this landed. Even shipping it behind a flag would let us validate the approach. We have a Zapier hack doing this today and it breaks weekly.

What we would need:

• An offline mode
• Changelog email previews