feat: add staff role functionality with dashboard access and service management

- Implemented SidebarStaff component tests to ensure staff users see only their dashboard and services.
- Created StaffMyServicesPage to display assigned services for staff users.
- Added migration to link clinic staff rows to user accounts for ROLE_STAFF access.
- Defined StaffPermissions class for static permissions related to staff role.
- Introduced StaffRouteGuardSubscriber to restrict API access for staff users.
- Developed StaffAccountService for managing staff user accounts and linking them to clinic staff.
- Added comprehensive tests for StaffAccountService to validate user creation, mobile number handling, and account attachment.
- Implemented tests for staff dashboard access to ensure proper permissions and access control.
- Created tests for staff login context to verify correct environment visibility based on user roles.

assets/admin/components/layout/Sidebar.tsx

@@ -490,6 +490,27 @@ function buildSections(
         ];
     }
 
+    if (primaryRole === "staff") {
+        // پرسنل فقط داشبورد خودش و سرویس‌های تخصیص‌یافته را دارد؛ بقیهٔ مسیرها
+        // سمت API هم برایش بسته است (StaffRouteGuardSubscriber).
+        return [
+            {
+                label: "عمومی",
+                items: [{ to: "/admin/dashboard", icon: ChartBarIcon, label: "داشبورد" }],
+            },
+            {
+                label: "مدیریت",
+                items: [
+                    {
+                        to: "/admin/my-services",
+                        icon: WrenchScrewdriverIcon,
+                        label: "سرویس‌های من",
+                    },
+                ],
+            },
+        ];
+    }
+
     if (primaryRole === "representation") {
         return [
             {
@@ -570,6 +591,7 @@ const ROLE_LABELS: Record<string, string> = {
     clinic: "مالک کلینیک",
     doctor: "پزشک",
     secretary: "منشی",
+    staff: "پرسنل",
     representation: "نماینده",
     user: "کاربر",
 };