feat(rbac): conditional access rule builder with rule preview