420 Bridge permissions

Bridge actions require explicit Wallet authorization or narrowly scoped capabilities for the intended asset/route/direction/amount.

Route governance, adapter configuration and risk administration are separate privileged domains. User authorization cannot change verifier configuration or bypass route/risk policy.