feat(menu-permissions): 메뉴 API 연동으로 사이드바 권한 정비

- .env.development.example과 lib/core/config/environment.dart, lib/core/permissions/permission_manager.dart에서 PERMISSION__ 폴백을 view 전용으로 좁히고 기본 정책을 명시적으로 거부하도록 재정비했다

- lib/core/navigation/*, lib/core/routing/app_router.dart, lib/widgets/app_shell.dart, lib/main.dart에서 메뉴 매니페스트·카탈로그를 도입해 /menus 응답을 캐싱하고 라우터·사이드바·Breadcrumb가 동일 menu_code/route_path를 쓰도록 리팩터링했다

- lib/core/permissions/permission_resources.dart와 그룹 권한/메뉴 마스터 모듈을 menu_code 기반 CRUD 및 Catalog 경로 정합성 검사로 전환하고 PermissionSynchronizer·PermissionBootstrapper를 확장했다

- test/helpers/test_permissions.dart, test/widgets/app_shell_test.dart 등 신규 구조를 반영하는 테스트·골든과 doc/frontend_menu_permission_tasks.md 문서를 보강했다

lib/features/masters/user/presentation/controllers/user_controller.dart

@@ -3,6 +3,7 @@ import 'package:superport_v2/core/network/failure.dart';
 import 'package:superport_v2/core/common/models/paginated_result.dart';
 import 'package:superport_v2/core/common/utils/pagination_utils.dart';
 
+import '../../../../../core/navigation/menu_catalog.dart';
 import '../../../../../core/permissions/permission_manager.dart';
 import '../../../group/domain/entities/group.dart';
 import '../../../group/domain/repositories/group_repository.dart';
@@ -21,15 +22,18 @@ class UserController extends ChangeNotifier {
     required GroupRepository groupRepository,
     GroupPermissionRepository? permissionRepository,
     PermissionManager? permissionManager,
+    MenuCatalog? menuCatalog,
   }) : _userRepository = userRepository,
        _groupRepository = groupRepository,
        _permissionRepository = permissionRepository,
-       _permissionManager = permissionManager;
+       _permissionManager = permissionManager,
+       _menuCatalog = menuCatalog;
 
   final UserRepository _userRepository;
   final GroupRepository _groupRepository;
   final GroupPermissionRepository? _permissionRepository;
   final PermissionManager? _permissionManager;
+  final MenuCatalog? _menuCatalog;
 
   PaginatedResult<UserAccount>? _result;
   bool _isLoading = false;
@@ -244,6 +248,7 @@ class UserController extends ChangeNotifier {
       final synchronizer = PermissionSynchronizer(
         repository: repository,
         manager: manager,
+        menuCatalog: _menuCatalog,
       );
       await synchronizer.syncForGroup(groupId);
     } catch (_) {

lib/features/masters/user/presentation/pages/user_page.dart

@@ -3,7 +3,8 @@ import 'package:get_it/get_it.dart';
 import 'package:intl/intl.dart' as intl;
 import 'package:shadcn_ui/shadcn_ui.dart';
 
-import 'package:superport_v2/core/constants/app_sections.dart';
+import 'package:superport_v2/core/navigation/menu_catalog.dart';
+import 'package:superport_v2/core/navigation/route_paths.dart';
 import 'package:superport_v2/widgets/app_layout.dart';
 import 'package:superport_v2/widgets/components/filter_bar.dart';
 import 'package:superport_v2/widgets/components/superport_pagination_controls.dart';
@@ -116,11 +117,13 @@ class _UserEnabledPageState extends State<_UserEnabledPage> {
       return;
     }
     final permissionManager = PermissionScope.of(context);
+    final menuCatalog = MenuCatalogScope.of(context);
     _controller = UserController(
       userRepository: GetIt.I<UserRepository>(),
       groupRepository: GetIt.I<GroupRepository>(),
       permissionRepository: GetIt.I<GroupPermissionRepository>(),
       permissionManager: permissionManager,
+      menuCatalog: menuCatalog,
     )..addListener(_handleControllerUpdate);
     _initialized = true;
     WidgetsBinding.instance.addPostFrameCallback((_) async {
@@ -179,7 +182,10 @@ class _UserEnabledPageState extends State<_UserEnabledPage> {
           subtitle: '사번 기반 계정과 그룹, 사용 상태를 관리합니다.',
           breadcrumbs: const [
             AppBreadcrumbItem(label: '대시보드', path: dashboardRoutePath),
-            AppBreadcrumbItem(label: '마스터', path: '/masters/users'),
+            AppBreadcrumbItem(
+              label: '마스터',
+              path: settingsUsersRoutePath,
+            ),
             AppBreadcrumbItem(label: '사용자'),
           ],
           actions: [