feat: full role permissions system — new modules, API persistence, sidebar context

- Backend: migration 080_role_permissions table (hotel-scoped, upsert)
- Backend: routes GET/PUT/DELETE /api/hotels/:slug/role-permissions
- Frontend: RolePermissionsContext — loads saved perms from API, provides can()
- Frontend: Sidebar uses context can() instead of hardcoded ROLE_PERMS
- Frontend: fixed module ID→permKey mapping (room-service, olap-reports, website-builder)
- Frontend: Documents page added to Управление nav (was missing)
- Frontend: equipment/wifi/ttlock get own permission keys (not bundled under 'settings')
- Frontend: floor_map gets own permission key (not bundled under 'rooms')
- Frontend: new module group 'Технологии': wifi, equipment, ttlock, floor_map
- Frontend: 'schedule' added to Администрирование module group
- Updated INITIAL_ROLE_PERMISSIONS: receptionist+availability+reports+documents+website, accountant+documents, technician+floor_map+equipment+ttlock

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/migrations/080_role_permissions.sql

@@ -0,0 +1,13 @@
+-- Custom role permissions per hotel
+CREATE TABLE IF NOT EXISTS role_permissions (
+  id          UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  hotel_id    UUID NOT NULL REFERENCES hotels(id) ON DELETE CASCADE,
+  role_key    VARCHAR(50) NOT NULL,
+  name        VARCHAR(100) NOT NULL,
+  color       VARCHAR(20) NOT NULL DEFAULT '#6B7280',
+  is_system   BOOLEAN NOT NULL DEFAULT false,
+  permissions JSONB NOT NULL DEFAULT '{}',
+  created_at  TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at  TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE(hotel_id, role_key)
+);