chore(webapp): add server-changes note for RBAC route permission enforcement

Author: matt-aitken

.server-changes/rbac-route-permission-enforcement.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: feature
+---
+
+Enforce role-based permissions on the dashboard routes for cancelling and replaying runs, managing prompt versions, inviting and managing organisation members, and managing billing, disabling the matching controls with a tooltip when your role lacks permission. Behaviour is unchanged in the default configuration, where permissions stay permissive.