Clarify that User.update :own is handled by HasPermission. Fix file path references from lib/mv/accounts to lib/accounts.
Add bypass vs HasPermission pattern documentation Update architecture and implementation plan docs