nx_connect_group_lib.nx

nx_connect_group_lib.nx -- group + broadcast-channel ROLES and PERMISSIONS, extracted as a shared library so the verifying gate (nx_connect_group) and the LIVE app (nx_connect_serve /community) bind ONE implementation. Until this split the permission model had NO user-facing surface at all. THE MODEL, by construction rather than by policy: OWNER > ADMIN > MEMBER. Only admins add or remove; the OWNER can never be removed; an admin cannot remove a peer or anyone above them, so there is no admin coup; only the owner promotes. A CHANNEL is admin-post / subscriber-read, a GROUP is members-post. The minor-to-romance wall extends to membership, so a minor is never admitted to a DATE-lane group. Symbols moved VERBATIM (no renames): renaming is what de-grounded compare rows on the earlier splits. license_tier: ORIGINAL