- sms-admin: full access (create, edit, delete) - sms-manager: create and edit only, no delete - sms-viewer: read-only, all write buttons hidden - Apply EnforcesRolesInRelation trait to BatchesRelationManager - Revert Nextcloud OAuth credentials to env vars (OAUTH_CLOUDSPICESBLUE_*) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>