Extend fine-grained ACL to settings, content, shop, and radio.

Gate pages and mutations on module PERMS instead of dashboard-only staff checks, add radio view/edit slugs with migration 0015, and expand the operations contract tests.

Co-authored-by: Cursor <[email protected]>

src/lib/permission-slugs.ts

@@ -26,6 +26,9 @@ export const PERMS = {
 	CATALOG_EDIT: "admin.catalog.edit",
 	RCON_EXECUTE: "admin.rcon.execute",
 	EXPORT: "admin.export",
+	// ── Radio Module ──
+	RADIO_VIEW: "admin.radio.view",
+	RADIO_EDIT: "admin.radio.edit",
 	PREFIXES_VIEW: "admin.prefixes.view",
 	PREFIXES_EDIT: "admin.prefixes.edit",
 	TICKETS_VIEW: "admin.tickets.view",