feat(menu-permissions): 메뉴 API 연동으로 사이드바 권한 정비

- .env.development.example과 lib/core/config/environment.dart, lib/core/permissions/permission_manager.dart에서 PERMISSION__ 폴백을 view 전용으로 좁히고 기본 정책을 명시적으로 거부하도록 재정비했다

- lib/core/navigation/*, lib/core/routing/app_router.dart, lib/widgets/app_shell.dart, lib/main.dart에서 메뉴 매니페스트·카탈로그를 도입해 /menus 응답을 캐싱하고 라우터·사이드바·Breadcrumb가 동일 menu_code/route_path를 쓰도록 리팩터링했다

- lib/core/permissions/permission_resources.dart와 그룹 권한/메뉴 마스터 모듈을 menu_code 기반 CRUD 및 Catalog 경로 정합성 검사로 전환하고 PermissionSynchronizer·PermissionBootstrapper를 확장했다

- test/helpers/test_permissions.dart, test/widgets/app_shell_test.dart 등 신규 구조를 반영하는 테스트·골든과 doc/frontend_menu_permission_tasks.md 문서를 보강했다

test/features/masters/user/presentation/controllers/user_controller_test.dart

@@ -59,7 +59,7 @@ void main() {
         page: any(named: 'page'),
         pageSize: any(named: 'pageSize'),
         groupId: any(named: 'groupId'),
-        menuId: any(named: 'menuId'),
+        menuCode: any(named: 'menuCode'),
         isActive: any(named: 'isActive'),
         includeDeleted: any(named: 'includeDeleted'),
       ),
@@ -252,7 +252,7 @@ void main() {
           page: any(named: 'page'),
           pageSize: any(named: 'pageSize'),
           groupId: sampleUser.group!.id,
-          menuId: any(named: 'menuId'),
+          menuCode: any(named: 'menuCode'),
           isActive: any(named: 'isActive'),
           includeDeleted: any(named: 'includeDeleted'),
         ),

test/features/masters/user/presentation/pages/user_page_test.dart

@@ -7,6 +7,7 @@ import 'package:get_it/get_it.dart';
 import 'package:mocktail/mocktail.dart';
 import 'package:shadcn_ui/shadcn_ui.dart';
 
+import '../../../../../helpers/test_app.dart';
 import '../../../../../helpers/tester_extensions.dart';
 import 'package:superport_v2/core/common/models/paginated_result.dart';
 import 'package:superport_v2/core/permissions/permission_manager.dart';
@@ -28,20 +29,7 @@ class _MockGroupPermissionRepository extends Mock
 
 class _FakeUserInput extends Fake implements UserInput {}
 
-Widget _buildApp(Widget child) {
-  return PermissionScope(
-    manager: PermissionManager(),
-    child: MaterialApp(
-      home: ShadTheme(
-        data: ShadThemeData(
-          colorScheme: const ShadSlateColorScheme.light(),
-          brightness: Brightness.light,
-        ),
-        child: Scaffold(body: child),
-      ),
-    ),
-  );
-}
+Widget _buildApp(Widget child) => buildTestApp(child);
 
 void main() {
   TestWidgetsFlutterBinding.ensureInitialized();
@@ -59,7 +47,7 @@ void main() {
     dotenv.testLoad(fileInput: 'FEATURE_USERS_ENABLED=false\n');
 
     await tester.pumpWidget(_buildApp(const UserPage()));
-    await tester.pump();
+    await tester.pumpAndSettle();
 
     expect(find.text('사용자(사원) 관리'), findsOneWidget);
     expect(find.text('테이블 리스트'), findsOneWidget);
@@ -104,7 +92,7 @@ void main() {
           page: any(named: 'page'),
           pageSize: any(named: 'pageSize'),
           groupId: any(named: 'groupId'),
-          menuId: any(named: 'menuId'),
+          menuCode: any(named: 'menuCode'),
           isActive: any(named: 'isActive'),
           includeDeleted: any(named: 'includeDeleted'),
         ),