feat: add auth module with login and access control

web/src/views/AppShellRouteView.vue

@@ -1,7 +1,7 @@
 <template>
   <div class="app">
     <SidebarRail
-      :nav-items="navItems"
+      :nav-items="filteredNavItems"
       :active-view="activeView"
       :current-user="currentUser"
       @navigate="handleNavigate"
@@ -124,7 +124,7 @@
 </template>
 
 <script setup>
-import { ref } from 'vue'
+import { computed, ref } from 'vue'
 
 import SidebarRail from '../components/layout/SidebarRail.vue'
 import TopBar from '../components/layout/TopBar.vue'
@@ -142,6 +142,7 @@ import EmployeeManagementView from './EmployeeManagementView.vue'
 
 import { useAppShell } from '../composables/useAppShell.js'
 import { useSystemState } from '../composables/useSystemState.js'
+import { filterNavItemsByAccess } from '../utils/accessControl.js'
 
 const employeeSummary = ref(null)
 
@@ -183,6 +184,7 @@ const {
 } = useAppShell()
 
 const { currentUser, logout } = useSystemState()
+const filteredNavItems = computed(() => filterNavItemsByAccess(navItems, currentUser.value))
 
 function handleLogout() {
   logout('manual')