Extend fine-grained ACL to settings, content, shop, and radio.

Gate pages and mutations on module PERMS instead of dashboard-only staff checks, add radio view/edit slugs with migration 0015, and expand the operations contract tests.

Co-authored-by: Cursor <[email protected]>

src/lib/admin/guard.ts

@@ -39,6 +39,16 @@ export async function requirePermission(permission: string): Promise<StaffUser>
 	};
 }
 
+export async function requirePermissionRateLimited(
+	permission: string,
+): Promise<StaffUser> {
+	const staff = await requirePermission(permission);
+	const ip = await clientIp();
+	if (!(await rateLimit(`admin:${staff.id}:${ip}`, 30, 60_000)).ok)
+		redirectSafe("/admin?error=ratelimit", "/admin");
+	return staff;
+}
+
 export async function requireStaffRateLimited(): Promise<StaffUser> {
 	const staff = await requireStaff();
 	const ip = await clientIp();