RAG Query

Section-scoped retrieval with role-based API keys

Environment: prod Isolation: OK