Role-Based Access Control in a Custom ERP: NestJS Guards, PostgreSQL Permission Tables, and UU PDP Compliance

How to design and implement a production-grade RBAC system for a custom ERP — covering the PostgreSQL permission schema, NestJS custom guards, Redis-cached permission lookups, and compliance considerations under Indonesia's UU PDP.