feat: Implement secretary permissions enforcement across multiple resources

- Added SecretaryAccessChecker to manage resource access for secretaries.
- Integrated permission checks for payments, inventory, and tags in relevant controllers.
- Updated PaymentController and PaymentMethodController to enforce secretary permissions.
- Enhanced TenantTagController to check permissions for tag management actions.
- Introduced tests for secretary resource enforcement, ensuring proper access control.
- Updated DoctorSecretary entity to include inventory and tags permissions.
- Created a comprehensive audit document for secretary permissions coverage and enforcement.
- Fixed potential crashes in SecretaryDashboard when rendering without doctor data.

assets/admin/types/index.ts

@@ -490,6 +490,18 @@ export interface SecretaryPermissions {
         view: boolean;
         update: boolean;
     };
+    inventory: {
+        view: boolean;
+        create: boolean;
+        update: boolean;
+        delete: boolean;
+    };
+    tags: {
+        view: boolean;
+        create: boolean;
+        update: boolean;
+        delete: boolean;
+    };
 }
 
 export interface Specialty {