feat: complete pet SOP governance workflow

internal/auth/permissions.go

@@ -0,0 +1,19 @@
+package auth
+
+func HasPermission(principal Principal, permission string) bool {
+	for _, allowed := range principal.Permissions {
+		if allowed == "*" || allowed == permission {
+			return true
+		}
+	}
+	return false
+}
+
+func HasAnyPermission(principal Principal, permissions ...string) bool {
+	for _, permission := range permissions {
+		if HasPermission(principal, permission) {
+			return true
+		}
+	}
+	return false
+}