feat: full role permissions system — new modules, API persistence, sidebar context

- Backend: migration 080_role_permissions table (hotel-scoped, upsert)
- Backend: routes GET/PUT/DELETE /api/hotels/:slug/role-permissions
- Frontend: RolePermissionsContext — loads saved perms from API, provides can()
- Frontend: Sidebar uses context can() instead of hardcoded ROLE_PERMS
- Frontend: fixed module ID→permKey mapping (room-service, olap-reports, website-builder)
- Frontend: Documents page added to Управление nav (was missing)
- Frontend: equipment/wifi/ttlock get own permission keys (not bundled under 'settings')
- Frontend: floor_map gets own permission key (not bundled under 'rooms')
- Frontend: new module group 'Технологии': wifi, equipment, ttlock, floor_map
- Frontend: 'schedule' added to Администрирование module group
- Updated INITIAL_ROLE_PERMISSIONS: receptionist+availability+reports+documents+website, accountant+documents, technician+floor_map+equipment+ttlock

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/src/app.ts

@@ -47,6 +47,7 @@ import paymentMethodsRoutes from './routes/paymentMethods'
 import paymentGatewaysRoutes from './routes/paymentGateways'
 import publicWidgetRoutes from './routes/publicWidget'
 import yookassaWebhookRoutes from './routes/yookassaWebhook'
+import rolePermissionsRoutes from './routes/role-permissions'
 import { setupAgentWsRoute } from './agent-ws'
 import { startJobs } from './jobs'
 import { initWebPush } from './push'
@@ -147,6 +148,7 @@ export async function buildApp() {
   await fastify.register(paymentGatewaysRoutes)
   await fastify.register(publicWidgetRoutes)
   await fastify.register(yookassaWebhookRoutes)
+  await fastify.register(rolePermissionsRoutes)
   await fastify.register(setupAgentWsRoute)
 
   startJobs()