Permission-Aware Retrieval Under a Context Budget