Decide what each contact may do
Permissions are dotted and per-contact — message.text, message.media,
calendar.availability, calendar.book, integration.<name> — set from a preset
or one by one. Availability answers with at most five policy-filtered slots and
never your raw free/busy.