[Auth] Role-based access middleware

[NiranjanaNS]

Restrict API access based on user roles (user, business, admin) using authenticated JWT claims.