feat: Implement secretary permissions enforcement across multiple resources

- Added SecretaryAccessChecker to manage resource access for secretaries.
- Integrated permission checks for payments, inventory, and tags in relevant controllers.
- Updated PaymentController and PaymentMethodController to enforce secretary permissions.
- Enhanced TenantTagController to check permissions for tag management actions.
- Introduced tests for secretary resource enforcement, ensuring proper access control.
- Updated DoctorSecretary entity to include inventory and tags permissions.
- Created a comprehensive audit document for secretary permissions coverage and enforcement.
- Fixed potential crashes in SecretaryDashboard when rendering without doctor data.

src/Secretary/Entity/DoctorSecretary.php

@@ -26,6 +26,8 @@ class DoctorSecretary
             'insurances'   => ['view' => true,  'create' => false, 'update' => false, 'delete' => false],
             'addresses'    => ['view' => true,  'create' => false, 'update' => false, 'delete' => false],
             'clinic_info'  => ['view' => true,  'update' => false],
+            'inventory'    => ['view' => false, 'create' => false, 'update' => false, 'delete' => false],
+            'tags'         => ['view' => false, 'create' => false, 'update' => false, 'delete' => false],
         ],
     ];