feat: complete Epic 1 — team management & permission system

- Story 1.1: Permission enum, config, AuthorizesPermissions & HasWorkspaceScope traits, member→worker migration
- Story 1.2: Team page with member list, invitation system with queued email
- Story 1.3: Role assignment (Manager/Worker) and member removal with activity logging
- Story 1.4: Owner-only permission toggle matrix for Managers (manage team, view logs, configure portal)
- Story 1.5: Role-based access enforcement — Workers see only assigned declarations/clients, sidebar scoping
- Story 1.6: Workspace switcher dropdown for multi-workspace users with session-based switching
- 83 new/modified files, 182 tests passing with zero regressions

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

tests/Feature/Database/RenameFoldersToDeclarationsTest.php

@@ -36,8 +36,8 @@ test('composite index exists on messages declaration_id and created_at', functio
 });
 
 test('migration is reversible and rollback restores folder tables', function () {
-    // Rollback foundation migrations (3) + polymorphic update + rename migration
-    $this->artisan('migrate:rollback', ['--step' => 5]);
+    // Rollback team_invitations (1) + member-to-worker rename (1) + foundation migrations (3) + polymorphic update + rename migration
+    $this->artisan('migrate:rollback', ['--step' => 7]);
 
     expect(Schema::hasTable('folders'))->toBeTrue();
     expect(Schema::hasTable('declarations'))->toBeFalse();