feat(roles): let each section decide who may assign work to others

Section access now only creates a record for yourself. Assigning it to a colleague requires a separate permission on that section.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/web/src/views/ActivityDetailView.vue

@@ -22,7 +22,7 @@ import type {
   OrgUserDto,
 } from '@mento/shared';
 import { useAuthStore } from '@/stores/auth';
-import { canReassignRecords } from '@/lib/roles';
+import { canAssignToOthers } from '@/lib/assign-access';
 import { activityTypeView, typeColorStyle, useActivityTypes } from '@/lib/activity-types';
 import { brand } from '@mento/shared';
 
@@ -51,7 +51,7 @@ function goBack() {
 }
 const auth = useAuthStore();
 const id = computed(() => (typeof route.params.id === 'string' ? route.params.id : ''));
-const canReassign = computed(() => canReassignRecords(auth.user?.role));
+const canReassign = computed(() => canAssignToOthers(auth.user, 'activities'));
 
 const loading = ref(true);
 const saving = ref(false);