fix(housekeeping): close final authorization gaps

src/actions/save-logo.ts

@@ -3,7 +3,8 @@
 import { revalidatePath } from "next/cache";
 import type { ContentMutationSnapshot } from "@/features/housekeeping/domains/content/services/mutations";
 import { createCorrelationId } from "@/features/housekeeping/foundation/contracts";
-import { requireStaff, type StaffUser } from "@/lib/admin/guard";
+import { requirePermission, type StaffUser } from "@/lib/admin/guard";
+import { PERMS } from "@/lib/permission-slugs";
 
 const PARTIAL_ERROR =
 	"Logo change completed partially; verify storage and audit state";
@@ -34,7 +35,7 @@ async function executeAuditedLogoMutation(
 export async function saveLogo(
 	formData: FormData,
 ): Promise<{ success: boolean; url?: string; error?: string }> {
-	const staff = await requireStaff();
+	const staff = await requirePermission(PERMS.SETTINGS_EDIT);
 	try {
 		const file = formData.get("file") as File | null;
 		if (!file) return { success: false, error: "No file provided" };