docs: add RBAC role tables to templates and tools endpoints (#3187) (#3188)

Refs #3185, #3186.

Author: OneStepAt4time

docs/api-reference.md

@@ -1285,6 +1285,10 @@ GET /v1/tools
 
 Lists all available MCP tools with their schemas.
 
+| Role | Required |
+|------|----------|
+| admin, operator, viewer | Yes |
+
 ```bash
 curl http://localhost:9100/v1/tools \
   -H "Authorization: Bearer $TOKEN"
@@ -2898,6 +2902,10 @@ GET /v1/templates
 
 Lists all registered session templates.
 
+| Role | Required |
+|------|----------|
+| admin, operator, viewer | Yes |
+
 ```bash
 curl http://localhost:9100/v1/templates \
   -H "Authorization: Bearer $TOKEN"
@@ -2915,6 +2923,10 @@ POST /v1/templates
 
 Creates a reusable session template with optional `{{variable}}` substitution. Rate limited: 60 req/min.
 
+| Role | Required |
+|------|----------|
+| admin, operator | Yes |
+
 ```bash
 curl -X POST http://localhost:9100/v1/templates \
   -H "Authorization: Bearer $TOKEN" \
@@ -2956,6 +2968,10 @@ GET /v1/templates/:id
 
 Returns a single template by ID.
 
+| Role | Required |
+|------|----------|
+| admin, operator, viewer | Yes |
+
 ```bash
 curl http://localhost:9100/v1/templates/tpl-abc123 \
   -H "Authorization: Bearer $TOKEN"
@@ -2979,6 +2995,10 @@ PUT /v1/templates/:id
 
 Partially updates a template. Only include fields to change.
 
+| Role | Required |
+|------|----------|
+| admin, operator | Yes |
+
 ```bash
 curl -X PUT http://localhost:9100/v1/templates/tpl-abc123 \
   -H "Authorization: Bearer $TOKEN" \
@@ -3006,6 +3026,10 @@ DELETE /v1/templates/:id
 
 Deletes a template by ID.
 
+| Role | Required |
+|------|----------|
+| admin, operator | Yes |
+
 ```bash
 curl -X DELETE http://localhost:9100/v1/templates/tpl-abc123 \
   -H "Authorization: Bearer $TOKEN"