List Permission Sections

Migration 0233's permission_sections, joined to their categories and in the product's own rank order (app/platform/permission_sections.py).

⛔SERVES THE TABLE, DECIDES NOTHING. It reads no grant, resolves no person and never answers "may this caller do X" -- it publishes the CATALOG of what is grantable, which is a different question from who holds what (GET /effective-grants above) and is deliberately kept a different endpoint. Gated on admin:people:read for the same reason /grants is: it is People and access's own data.

WHAT IT IS FOR. Until now the answer to "which grant opens which page" was transcribed by hand into three separate web files, and drifted from the routes twice on 2026-09-01 (ISS-395 -- see permission_sections.py's module docstring for both). This is the read that lets the screen stop guessing; the gate that stops the TABLE drifting from the routes is tests/platform/test_every_gated_route_is_grantable.py.