fix api security issues and update pages issue

src/api/rolePermission.ts

@@ -1,10 +1,10 @@
 /**
  * Roles & permissions admin (legacy CI rolepermission/*).
- * Expected under `/api/v1/role-permission`.
+ * Live Laravel routes are exposed under `/api/v1/role-permissions`.
  */
 import { ApiHttpError, apiFetch } from './http'
 
-const BASE = '/api/v1/role-permission'
+const BASE = '/api/v1/role-permissions'
 
 type DataEnvelope<T> = { data?: T }