Extend fine-grained ACL to settings, content, shop, and radio.

Gate pages and mutations on module PERMS instead of dashboard-only staff checks, add radio view/edit slugs with migration 0015, and expand the operations contract tests.

Co-authored-by: Cursor <[email protected]>

src/actions/admin-bans.ts

@@ -2,7 +2,8 @@
 
 import { revalidatePath } from "next/cache";
 import type { $Enums } from "@/generated/prisma/client";
-import { requireStaffRateLimited as requireStaff } from "@/lib/admin/guard";
+import { requirePermissionRateLimited } from "@/lib/admin/guard";
+import { PERMS } from "@/lib/permissions";
 import { prisma } from "@/lib/prisma";
 import { rcon } from "@/lib/services/rcon";
 import { logStaffActivity } from "@/lib/services/staff-activity";
@@ -17,7 +18,7 @@ const BAN_TYPES: ReadonlySet<string> = new Set([
 const PERMANENT_SECONDS = 100 * 365 * 24 * 3600;
 
 export async function createBan(formData: FormData): Promise<void> {
-	const staff = await requireStaff();
+	const staff = await requirePermissionRateLimited(PERMS.USERS_BAN);
 	const userId = Number(formData.get("userId"));
 	const reason =
 		String(formData.get("reason") ?? "")
@@ -63,7 +64,7 @@ export async function createBan(formData: FormData): Promise<void> {
 }
 
 export async function liftBan(formData: FormData): Promise<void> {
-	const staff = await requireStaff();
+	const staff = await requirePermissionRateLimited(PERMS.USERS_BAN);
 	const id = Number(formData.get("id"));
 	if (id > 0) {
 		await prisma.ban.delete({ where: { id } });