feat: documentation on rbac middleware

It would probably be good to specify the regex variant being used, e.g Python RegEx