feat: granular permissions, export backup, user/role management

- PermissionSeeder: 29 permissions with role mapping (admin/manager/staff)
- Policies updated to use hasPermissionTo() instead of hasRole()
- ExportBackup command: JSON per-table backup with chunk processing
- UserResource: CRUD users with role assignment (admin only)
- RoleResource: CRUD roles with permission assignment (admin only)
- UserPolicy + RolePolicy: admin-only access control
- ImportCskh: detailed skip logging with color in dry-run mode
- Widgets: permission-based visibility checks
- Tests: 8/8 pass (21 assertions)

tests/Feature/TransferFlowTest.php

@@ -7,12 +7,24 @@ use App\Models\FeedbackChannel;
 use App\Models\TicketTransferLog;
 use App\Models\User;
 use App\Services\TransferService;
+use Spatie\Permission\Models\Permission;
+use Spatie\Permission\Models\Role;
 
 uses(\Illuminate\Foundation\Testing\RefreshDatabase::class);
 
+beforeEach(function () {
+    app()[\Spatie\Permission\PermissionRegistrar::class]->forgetCachedPermissions();
+
+    Permission::firstOrCreate(['name' => 'transfer-department']);
+    Permission::firstOrCreate(['name' => 'view-feedback']);
+    Permission::firstOrCreate(['name' => 'create-feedback']);
+    Permission::firstOrCreate(['name' => 'update-feedback']);
+});
+
 // ─── Scenario 3: Transfer Flow ──────────────────────────────────────
 test('transfer creates log, updates department, and notifies manager', function () {
-    \Spatie\Permission\Models\Role::create(['name' => 'manager']);
+    $managerRole = Role::create(['name' => 'manager']);
+    $managerRole->givePermissionTo(['transfer-department', 'view-feedback', 'create-feedback', 'update-feedback']);
 
     \Illuminate\Support\Facades\Notification::fake();
 
@@ -73,7 +85,8 @@ test('transfer creates log, updates department, and notifies manager', function
 
 // ─── Transfer without reason should fail ────────────────────────────
 test('transfer without reason throws validation error', function () {
-    \Spatie\Permission\Models\Role::create(['name' => 'manager']);
+    $managerRole = Role::create(['name' => 'manager']);
+    $managerRole->givePermissionTo(['transfer-department', 'view-feedback', 'create-feedback', 'update-feedback']);
 
     $sender = User::factory()->create();
     $sender->assignRole('manager');