AuthShield — Multi-Tenant RBAC & Subscription Billing Engine