feat: Implement secretary permissions enforcement across multiple resources

- Added SecretaryAccessChecker to manage resource access for secretaries.
- Integrated permission checks for payments, inventory, and tags in relevant controllers.
- Updated PaymentController and PaymentMethodController to enforce secretary permissions.
- Enhanced TenantTagController to check permissions for tag management actions.
- Introduced tests for secretary resource enforcement, ensuring proper access control.
- Updated DoctorSecretary entity to include inventory and tags permissions.
- Created a comprehensive audit document for secretary permissions coverage and enforcement.
- Fixed potential crashes in SecretaryDashboard when rendering without doctor data.

assets/admin/components/layout/Sidebar.tsx

@@ -359,51 +359,55 @@ function buildSections(
     }
 
     if (primaryRole === "secretary") {
+        // منو از روی مجوزهای همان منشی ساخته می‌شود: آیتمی که مجوز مشاهده‌اش را
+        // ندارد اصلاً نمایش داده نمی‌شود (هم‌راستا با enforcement سمت API).
+        const items: SectionItem[] = [];
+        if (can("appointments", "view")) {
+            items.push({
+                to: "/admin/appointments",
+                icon: CalendarDaysIcon,
+                label: "نوبت‌ها",
+                children: APPOINTMENTS_CHILDREN_WITH_RESERVE,
+            });
+        }
+        if (can("patients", "view")) {
+            items.push({
+                to: "/admin/patients",
+                icon: FolderOpenIcon,
+                label: "پرونده بیماران",
+                feature: "patient_records",
+            });
+        }
+        if (can("payments", "view")) {
+            items.push({
+                to: "/admin/my-payments",
+                icon: CreditCardIcon,
+                label: "پرداخت‌ها",
+            });
+        }
+        if (can("insurances", "view")) {
+            items.push(
+                {
+                    to: "/admin/insurance-pricing",
+                    icon: ShieldCheckIcon,
+                    label: "قیمت‌گذاری بیمه",
+                    feature: "insurance",
+                },
+                {
+                    to: "/admin/claims",
+                    icon: DocumentTextIcon,
+                    label: "مطالبات بیمه",
+                    feature: "insurance",
+                },
+            );
+        }
+
         return [
             {
                 label: "عمومی",
-                items: [
-                    {
-                        to: "/admin/dashboard",
-                        icon: ChartBarIcon,
-                        label: "داشبورد",
-                    },
-                ],
-            },
-            {
-                label: "مدیریت",
-                items: [
-                    {
-                        to: "/admin/appointments",
-                        icon: CalendarDaysIcon,
-                        label: "نوبت‌ها",
-                        children: APPOINTMENTS_CHILDREN_WITH_RESERVE,
-                    },
-                    {
-                        to: "/admin/patients",
-                        icon: FolderOpenIcon,
-                        label: "پرونده بیماران",
-                        feature: "patient_records",
-                    },
-                    {
-                        to: "/admin/my-payments",
-                        icon: CreditCardIcon,
-                        label: "پرداخت‌ها",
-                    },
-                    {
-                        to: "/admin/insurance-pricing",
-                        icon: ShieldCheckIcon,
-                        label: "قیمت‌گذاری بیمه",
-                        feature: "insurance",
-                    },
-                    {
-                        to: "/admin/claims",
-                        icon: DocumentTextIcon,
-                        label: "مطالبات بیمه",
-                        feature: "insurance",
-                    },
-                ],
+                items: [{ to: "/admin/dashboard", icon: ChartBarIcon, label: "داشبورد" }],
             },
+            { label: "مدیریت", items },
         ];
     }