feat: granular permissions, export backup, user/role management

- PermissionSeeder: 29 permissions with role mapping (admin/manager/staff)
- Policies updated to use hasPermissionTo() instead of hasRole()
- ExportBackup command: JSON per-table backup with chunk processing
- UserResource: CRUD users with role assignment (admin only)
- RoleResource: CRUD roles with permission assignment (admin only)
- UserPolicy + RolePolicy: admin-only access control
- ImportCskh: detailed skip logging with color in dry-run mode
- Widgets: permission-based visibility checks
- Tests: 8/8 pass (21 assertions)

database/seeders/AfterSalesSeeder.php

@@ -19,6 +19,8 @@ class AfterSalesSeeder extends Seeder
         Role::create(['name' => 'manager']);
         Role::create(['name' => 'staff']);
 
+        $this->call(PermissionSeeder::class);
+
         $admin = User::create([
             'name' => 'Admin',
             'email' => 'admin@minicrm.local',