The module vocabulary a system template may be composed of

Every module key with its pt-PT label and its implication rules.

Byte-identical to GET /api/company-roles/catalog, which is gated on admin; this console is gated on system_admin, and the two gates are disjoint sets of people, so the payload is served on both routers rather than the operator being asked to hold a tenant permission.

⚠️ Declared BEFORE GET /roles/{role_id}. That path parameter is typed int, so a later declaration would make this URL a 422 rather than falling through — the same ordering care app/routes/__init__.py already takes with /permissions/catalog against /permissions/{permission_id}.