feat: complete Epic 1 — team management & permission system

- Story 1.1: Permission enum, config, AuthorizesPermissions & HasWorkspaceScope traits, member→worker migration
- Story 1.2: Team page with member list, invitation system with queued email
- Story 1.3: Role assignment (Manager/Worker) and member removal with activity logging
- Story 1.4: Owner-only permission toggle matrix for Managers (manage team, view logs, configure portal)
- Story 1.5: Role-based access enforcement — Workers see only assigned declarations/clients, sidebar scoping
- Story 1.6: Workspace switcher dropdown for multi-workspace users with session-based switching
- 83 new/modified files, 182 tests passing with zero regressions

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

resources/js/pages/declarations/Show.vue

@@ -79,6 +79,8 @@ type Props = {
     workspaceUsers: WorkspaceUser[];
     mentionStoreUrl: string;
     canMention: boolean;
+    canEdit: boolean;
+    canDelete: boolean;
 };
 
 const props = defineProps<Props>();
@@ -344,7 +346,7 @@ const declarationTimelineItems = computed(() => {
                         typeLabels[declaration.type] ?? declaration.type
                     "
                 />
-                <Button variant="outline" as-child>
+                <Button v-if="props.canEdit" variant="outline" as-child>
                     <Link :href="editUrl">Modifier la déclaration</Link>
                 </Button>
             </div>