For RBAC
Make the object, create deafult system roles, add admin ui for role management
I would suggest to group the different new modules under the same namespace. Koha::Role is too generic. Examples: Koha::Auth::Permissions Koha::Auth::Roles or Koha::AccessControl::Permissions Koha::AccessControl::Roles