feat: complete Epic 1 — team management & permission system

- Story 1.1: Permission enum, config, AuthorizesPermissions & HasWorkspaceScope traits, member→worker migration
- Story 1.2: Team page with member list, invitation system with queued email
- Story 1.3: Role assignment (Manager/Worker) and member removal with activity logging
- Story 1.4: Owner-only permission toggle matrix for Managers (manage team, view logs, configure portal)
- Story 1.5: Role-based access enforcement — Workers see only assigned declarations/clients, sidebar scoping
- Story 1.6: Workspace switcher dropdown for multi-workspace users with session-based switching
- 83 new/modified files, 182 tests passing with zero regressions

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/Http/Controllers/WorkspaceSwitchController.php

@@ -2,27 +2,41 @@
 
 namespace App\Http\Controllers;
 
+use App\Http\Requests\SwitchWorkspaceRequest;
 use Illuminate\Http\RedirectResponse;
-use Illuminate\Http\Request;
 
 class WorkspaceSwitchController extends Controller
 {
     /**
      * Switch the current workspace.
      */
-    public function __invoke(Request $request): RedirectResponse
+    public function __invoke(SwitchWorkspaceRequest $request): RedirectResponse
     {
-        $workspaceId = $request->input('workspace_id');
+        $workspaceId = (int) $request->validated('workspace_id');
 
         $user = $request->user();
         $hasAccess = $user->workspaces()->where('workspaces.id', $workspaceId)->exists();
 
         if (! $hasAccess) {
-            return back();
+            return redirect()->route('dashboard');
         }
 
-        $request->session()->put('current_workspace_id', (int) $workspaceId);
+        $previousWorkspaceId = $request->session()->get('current_workspace_id');
 
-        return back();
+        if ($previousWorkspaceId === $workspaceId) {
+            return redirect()->route('dashboard');
+        }
+
+        $request->session()->put('current_workspace_id', $workspaceId);
+
+        activity()
+            ->causedBy($user)
+            ->withProperties([
+                'previous_workspace_id' => $previousWorkspaceId,
+                'new_workspace_id' => $workspaceId,
+            ])
+            ->log('Switched workspace');
+
+        return redirect()->route('dashboard');
     }
 }