feat(api): complete authorization gaps - document history authz, versioned permission cache, explain endpoint, cv capabilities