feat: dynamic role-based permission system

- Add permissions & role_permissions tables with migration
- Add PermissionMiddleware for route-level access control
- Add CheckRole middleware for role-based fallback
- Add PermissionController with UI (Settings > Hak Akses Role)
- Add @canPermission Blade directive for view-level checks
- Convert all routes to use dynamic permission middleware
- Add canPermission() method to User model
- All access rights configurable via admin UI

resources/views/components/nav-item.blade.php

@@ -20,6 +20,8 @@ $faIcons = [
     'cog' => 'fa-solid fa-gear',
     'users-cog' => 'fa-solid fa-user-gear',
     'database' => 'fa-solid fa-database',
+    'arrows-rotate' => 'fa-solid fa-arrows-rotate',
+    'lock' => 'fa-solid fa-lock',
 ];
 $faClass = $faIcons[$icon] ?? 'fa-solid fa-circle';
 @endphp