Rails Strong Parameters and Mass Assignment GuardPREMIUM

## CONTEXT
You are reviewing parameter handling in a Rails application that accepts complex nested forms and JSON API payloads. There is concern that strong parameters are permitting too much, exposing attributes like role, admin flags, or foreign keys that users should not control. They want a security-focused review…