As a user I would like to define RBAC for different cost data available for may infrastructure:

• What: define permissions and enforce visibility of cost data by scope (project/cluster).
• for MVP we need to support Cluser+Project Permissions, reference here https://drive.google.com/file/d/1nFVoP1-YQKLRpfTFgUcRbuYTsRhoVchc/view at 51:00

• Where:

• BE: packages/backend/src/plugins/cost-management/permissions.ts with @backstage/plugin-permission-node

• FE: guard routes and UI with @backstage/plugin-permission-react

• Notes: create permission actions/resources; ensure 403 vs empty states are handled.

Document for RBAC Permissions for Openshift Page - https://docs.google.com/document/d/1jlxXlcmXOFNc6IUxWpCaHCYschLHrI4RnKZzGo758Vo/edit?tab=t.0