Extend fine-grained ACL to settings, content, shop, and radio.

Gate pages and mutations on module PERMS instead of dashboard-only staff checks, add radio view/edit slugs with migration 0015, and expand the operations contract tests.

Co-authored-by: Cursor <[email protected]>

prisma/migrations/0012_seed_acl_permissions.sql

@@ -25,6 +25,8 @@ INSERT INTO `acl_permissions` (`slug`, `title`) VALUES
   ('admin.catalog.edit', 'Edit catalog'),
   ('admin.rcon.execute', 'Execute RCON commands'),
   ('admin.export', 'Export data'),
+  ('admin.radio.view', 'View radio admin'),
+  ('admin.radio.edit', 'Edit radio admin'),
   ('admin.prefixes.view', 'View prefixes'),
   ('admin.prefixes.edit', 'Edit prefixes'),
   ('admin.tickets.view', 'View tickets'),