feat(act): RBAC-gated CLI host + admin table styling

#19 in tonybierman/arium — merged 2026-05-29

Summary

This branch bundles the new arium-act RBAC-gated CLI host work together with admin-table styling cleanups across both adapters and refreshed fullstack examples.

arium-act — RBAC-gated CLI host

• New arium-act crate: a CLI host that runs commands behind arium's RBAC gate, with audit recording (audit.rs) wired through audit::record_or_log (DENIED always, GRANTED opt-in).
• Auth gate moved into extensions (extensions.rs, gate.rs); crates renamed to arium-act*.
• New arium-act-db extension with a users command and table output.
• --db <PATH> convenience flag (sqlite shorthand) on the host.

Admin table styling

• Pinned admin stylesheet and simplified admin tables in arium-dioxus and mirrored the same changes in arium-leptos (admin screens, audit log, role screens, style.css).
• MFA setup and token component styling touch-ups in both adapters.

Examples

• Updated dioxus-fullstack-example and leptos-fullstack-example to match.

Test plan

• cargo build / cargo test across the workspace
• Run the fullstack examples and verify admin tables render correctly
• Exercise arium-act commands behind the RBAC gate (allowed + denied paths) and confirm audit events

🤖 Generated with Claude Code