feat(menu-permissions): 메뉴 API 연동으로 사이드바 권한 정비

- .env.development.example과 lib/core/config/environment.dart, lib/core/permissions/permission_manager.dart에서 PERMISSION__ 폴백을 view 전용으로 좁히고 기본 정책을 명시적으로 거부하도록 재정비했다

- lib/core/navigation/*, lib/core/routing/app_router.dart, lib/widgets/app_shell.dart, lib/main.dart에서 메뉴 매니페스트·카탈로그를 도입해 /menus 응답을 캐싱하고 라우터·사이드바·Breadcrumb가 동일 menu_code/route_path를 쓰도록 리팩터링했다

- lib/core/permissions/permission_resources.dart와 그룹 권한/메뉴 마스터 모듈을 menu_code 기반 CRUD 및 Catalog 경로 정합성 검사로 전환하고 PermissionSynchronizer·PermissionBootstrapper를 확장했다

- test/helpers/test_permissions.dart, test/widgets/app_shell_test.dart 등 신규 구조를 반영하는 테스트·골든과 doc/frontend_menu_permission_tasks.md 문서를 보강했다

test/helpers/inventory_test_stubs.dart

@@ -11,6 +11,8 @@ import 'package:superport_v2/features/masters/product/domain/repositories/produc
 import 'package:superport_v2/features/masters/warehouse/domain/entities/warehouse.dart';
 import 'package:superport_v2/features/masters/warehouse/domain/repositories/warehouse_repository.dart';
 
+import 'test_permissions.dart';
+
 const int _inboundTypeId = 100;
 const int _outboundTypeId = 200;
 const int _rentalRentTypeId = 300;
@@ -42,6 +44,7 @@ InventoryTestStubConfig _stubConfig = const InventoryTestStubConfig();
 void registerInventoryTestStubs([
   InventoryTestStubConfig config = const InventoryTestStubConfig(),
 ]) {
+  grantTestPermissions();
   _stubConfig = config;
   lastTransactionListFilter = null;
   final lookup = _StubInventoryLookupRepository(

test/helpers/test_app.dart

@@ -1,17 +1,124 @@
 import 'package:flutter/material.dart';
+import 'package:flutter_test/flutter_test.dart';
 import 'package:shadcn_ui/shadcn_ui.dart';
 
+import 'package:superport_v2/core/common/models/paginated_result.dart';
+import 'package:superport_v2/core/navigation/menu_catalog.dart';
+import 'package:superport_v2/core/navigation/route_paths.dart';
 import 'package:superport_v2/core/permissions/permission_manager.dart';
 import 'package:superport_v2/core/theme/superport_shad_theme.dart';
+import 'package:superport_v2/features/masters/menu/domain/entities/menu.dart';
+import 'package:superport_v2/features/masters/menu/domain/repositories/menu_repository.dart';
 
 Widget buildTestApp(Widget child, {PermissionManager? permissionManager}) {
+  final catalog = createTestMenuCatalog();
   return PermissionScope(
     manager: permissionManager ?? PermissionManager(),
-    child: ShadApp(
-      debugShowCheckedModeBanner: false,
-      theme: SuperportShadTheme.light(),
-      darkTheme: SuperportShadTheme.dark(),
-      home: ScaffoldMessenger(child: Scaffold(body: child)),
+    child: MenuCatalogScope(
+      catalog: catalog,
+      child: ShadApp(
+        debugShowCheckedModeBanner: false,
+        theme: SuperportShadTheme.light(),
+        darkTheme: SuperportShadTheme.dark(),
+        home: ScaffoldMessenger(child: Scaffold(body: child)),
+      ),
     ),
   );
 }
+
+MenuCatalog createTestMenuCatalog({
+  List<MenuItem>? menus,
+  MenuRepository? repository,
+}) {
+  final catalog = MenuCatalog(
+    repository: repository ?? _TestMenuRepository(),
+  );
+  final seedMenus = menus ?? _defaultMenuItems;
+  catalog.replaceAll(List<MenuItem>.from(seedMenus));
+  addTearDown(catalog.dispose);
+  return catalog;
+}
+
+final List<MenuItem> _defaultMenuItems = List<MenuItem>.unmodifiable([
+  MenuItem(
+    id: 1,
+    menuCode: 'dashboard',
+    menuName: '대시보드',
+    path: dashboardRoutePath,
+    displayOrder: 10,
+  ),
+  MenuItem(
+    id: 2,
+    menuCode: 'inventory.summary',
+    menuName: '재고 현황',
+    path: inventorySummaryRoutePath,
+    displayOrder: 20,
+  ),
+  MenuItem(
+    id: 3,
+    menuCode: 'inventory.receipts',
+    menuName: '입고',
+    path: inventoryReceiptsRoutePath,
+    displayOrder: 21,
+  ),
+  MenuItem(
+    id: 4,
+    menuCode: 'inventory.issues',
+    menuName: '출고',
+    path: inventoryIssuesRoutePath,
+    displayOrder: 22,
+  ),
+  MenuItem(
+    id: 5,
+    menuCode: 'settings.users',
+    menuName: '사용자 관리',
+    path: settingsUsersRoutePath,
+    displayOrder: 40,
+  ),
+  MenuItem(
+    id: 6,
+    menuCode: 'settings.group_permissions',
+    menuName: '그룹 메뉴 권한',
+    path: settingsGroupPermissionsRoutePath,
+    displayOrder: 43,
+  ),
+]);
+
+class _TestMenuRepository implements MenuRepository {
+  @override
+  Future<MenuItem> create(MenuInput input) {
+    throw UnimplementedError();
+  }
+
+  @override
+  Future<void> delete(int id) {
+    throw UnimplementedError();
+  }
+
+  @override
+  Future<PaginatedResult<MenuItem>> list({
+    int page = 1,
+    int pageSize = 20,
+    String? query,
+    int? parentId,
+    bool? isActive,
+    bool includeDeleted = false,
+  }) async {
+    return PaginatedResult<MenuItem>(
+      items: const [],
+      page: 1,
+      pageSize: 0,
+      total: 0,
+    );
+  }
+
+  @override
+  Future<MenuItem> restore(int id) {
+    throw UnimplementedError();
+  }
+
+  @override
+  Future<MenuItem> update(int id, MenuInput input) {
+    throw UnimplementedError();
+  }
+}

test/helpers/test_permissions.dart

@@ -0,0 +1,29 @@
+import 'package:superport_v2/core/config/environment.dart';
+import 'package:superport_v2/core/permissions/permission_resources.dart';
+
+/// 통합 테스트에서 버튼/액션이 숨겨지지 않도록 기본 권한을 허용한다.
+void grantTestPermissions({bool includeWrites = true}) {
+  final commonActions = includeWrites ? {'all'} : {'view'};
+  Environment.setTestPermissions({
+    PermissionResources.dashboard: commonActions,
+    PermissionResources.stockTransactions: commonActions,
+    PermissionResources.approvals: commonActions,
+    PermissionResources.approvalSteps: commonActions,
+    PermissionResources.approvalHistories: commonActions,
+    PermissionResources.approvalTemplates: commonActions,
+    PermissionResources.inventorySummary: commonActions,
+    PermissionResources.groupMenuPermissions: commonActions,
+    PermissionResources.vendors: commonActions,
+    PermissionResources.products: commonActions,
+    PermissionResources.warehouses: commonActions,
+    PermissionResources.customers: commonActions,
+    PermissionResources.users: commonActions,
+    PermissionResources.groups: commonActions,
+    PermissionResources.menus: commonActions,
+    PermissionResources.postalSearch: commonActions,
+    PermissionResources.reports: commonActions,
+    PermissionResources.reportsTransactions: commonActions,
+    PermissionResources.reportsApprovals: commonActions,
+    PermissionResources.inventoryScope: {'view'},
+  });
+}