Commit MWS backend source tree

The ASP.NET Core solution (mws.api/mws.application/mws.domain/
mws.infrastructure) existed only as untracked working files. Adding
it to version control, plus a .gitignore for build output and local
tooling directories, so the CQRS/mediator refactor plan has a real
git history to branch and diff against.

mws.api/Controllers/RolesController.cs

@@ -0,0 +1,48 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Mws.Application.Permissions;
+using Mws.Application.Roles;
+
+namespace Mws.Api.Controllers;
+
+[ApiController]
+[Route("api/roles")]
+[Authorize]
+public class RolesController(IRoleService roleService, IPermissionService permissions) : ControllerBase
+{
+    [HttpGet]
+    public async Task<ActionResult<List<RoleDto>>> GetAll(CancellationToken ct)
+    {
+        await permissions.EnsureAsync(User.GetUserId(), "roles", PermissionAction.View, ct);
+        return Ok(await roleService.GetRolesAsync(ct));
+    }
+
+    [HttpGet("{id:guid}")]
+    public async Task<ActionResult<RoleDto>> Get(Guid id, CancellationToken ct)
+    {
+        await permissions.EnsureAsync(User.GetUserId(), "roles", PermissionAction.View, ct);
+        return Ok(await roleService.GetRoleAsync(id, ct));
+    }
+
+    [HttpPost]
+    public async Task<ActionResult<RoleDto>> Create([FromBody] SaveRoleRequest request, CancellationToken ct)
+    {
+        await permissions.EnsureAsync(User.GetUserId(), "roles", PermissionAction.Create, ct);
+        return Ok(await roleService.CreateRoleAsync(request, ct));
+    }
+
+    [HttpPut("{id:guid}")]
+    public async Task<ActionResult<RoleDto>> Update(Guid id, [FromBody] SaveRoleRequest request, CancellationToken ct)
+    {
+        await permissions.EnsureAsync(User.GetUserId(), "roles", PermissionAction.Edit, ct);
+        return Ok(await roleService.UpdateRoleAsync(id, request, ct));
+    }
+
+    [HttpDelete("{id:guid}")]
+    public async Task<IActionResult> Delete(Guid id, CancellationToken ct)
+    {
+        await permissions.EnsureAsync(User.GetUserId(), "roles", PermissionAction.Delete, ct);
+        await roleService.DeleteRoleAsync(id, ct);
+        return NoContent();
+    }
+}