PASS: Province Treasurer Charity Steward and Viewer are migration-scoped
PASS: Feature switches are additive and explicit
PASS: Role capability matrix separates finance and viewing
PASS: Province context does not infer Unit office
PASS: Disabled feature fails before endpoint work
PASS: Dashboard navigation filters disabled features server-side