fix: standardize all @lib imports and add missing rbac utility

workbench/src/components/insight/layout/TimeRangePicker.tsx

@@ -1,7 +1,7 @@
 'use client'
 
 import { InsightState } from '../../insight/store/urlState'
-import { formatDuration } from '@lib/format'
+import { formatDuration } from '../../../lib/format'
 
 interface TimeRangePickerProps {
   state: InsightState

workbench/src/components/insight/snippets/SnippetLibrary.tsx

@@ -2,7 +2,7 @@
 
 import { useMemo, useState } from 'react'
 import { InsightState } from '../../insight/store/urlState'
-import { canAccessSnippet } from '@lib/rbac'
+import { canAccessSnippet } from '../../../lib/rbac'
 
 interface Snippet {
   name: string

workbench/src/components/insight/viz/LogsTable.tsx

@@ -1,7 +1,7 @@
 'use client'
 
 import { LogEntry } from '../../insight/services/adapters/logs'
-import { getLogLevelColor } from '@lib/format'
+import { getLogLevelColor } from '../../../lib/format'
 
 interface LogsTableProps {
   logs: LogEntry[]

workbench/src/components/insight/viz/LogsViewer.tsx

@@ -1,7 +1,7 @@
 'use client'
 
 import { LogEntry } from '../../insight/services/adapters/logs'
-import { getLogLevelColor } from '@lib/format'
+import { getLogLevelColor } from '../../../lib/format'
 
 interface LogsViewerProps {
   logs: LogEntry[]

workbench/src/components/insight/viz/MetricsChart.tsx

@@ -1,7 +1,7 @@
 'use client'
 
 import { PrometheusResponse } from '../../insight/services/adapters/prometheus'
-import { formatNumber } from '@lib/format'
+import { formatNumber } from '../../../lib/format'
 
 interface MetricsChartProps {
   series: PrometheusResponse[]

workbench/src/components/insight/viz/MetricsTable.tsx

@@ -1,7 +1,7 @@
 'use client'
 
 import { PrometheusResponse } from '../../insight/services/adapters/prometheus'
-import { formatNumber } from '@lib/format'
+import { formatNumber } from '../../../lib/format'
 
 interface MetricsTableProps {
   series: PrometheusResponse[]

workbench/src/components/insight/viz/MetricsTopStats.tsx

@@ -1,7 +1,7 @@
 'use client'
 
 import { PrometheusResponse } from '../../insight/services/adapters/prometheus'
-import { formatNumber } from '@lib/format'
+import { formatNumber } from '../../../lib/format'
 
 interface MetricsTopStatsProps {
   series: PrometheusResponse[]

workbench/src/lib/rbac.ts

@@ -0,0 +1,14 @@
+export interface SnippetRBAC {
+    roles?: string[]
+    environments?: string[]
+}
+
+export function canAccessSnippet(rbac: SnippetRBAC | undefined, context: {
+    role: string
+    env: string
+}) {
+    if (!rbac) return true
+    if (rbac.roles && !rbac.roles.includes(context.role)) return false
+    if (rbac.environments && !rbac.environments.includes(context.env)) return false
+    return true
+}