Multi-user support with roles (Admin, Operator, Viewer)

Support multiple user accounts with role-based access control:

- **Admin** — full access (create/delete peers, routes, users, backup/restore)
- **Operator** — manage peers and routes, but no user management or system settings
- **Viewer** — read-only dashboard access