Merged in feature/permit-policy-cleanup (pull request #210)

cleanup permit policies and correct documentation

* docs

* policy cleanup

* refactor

* Merge remote-tracking branch 'origin/feature/permit-policy-cleanup' into feature/permit-policy-cleanup

* docs and edits

docs/ai.generated/09-authentication-guide.md

@@ -313,7 +313,6 @@ Permissions follow the format `resource:action`:
 | `clients` | `get` | List all clients |
 | `document` | `get`, `post`, `patch`, `delete` | Document operations |
 | `folders` | `get`, `post`, `patch`, `delete` | Folder management |
-| `query` | `get`, `post`, `patch` | Query definitions |
 | `export` | `get`, `post` | Export operations |
 | `admin` | `get`, `post`, `patch`, `delete` | User and EULA administration |
 | `eula` | `get`, `post` | EULA status and agreement |