d4e3106fca
Replace the internal permission_layers config field with a union on permission itself (single object or array of layered configs). Add ConfigPermission.toLayers to normalise at consumption sites. Schema has no decode transform, so user files round-trip through Config.update / updateGlobal without their permission section being rewritten into array form.