Laravel 8 REST API (case study: blog app) use sanctum auth, spatie roles & permission, and basic crud.