chore: commit pending admin-panel, api auth and parity doc changes

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>

apps/admin-panel/src/layouts/navMenuItems.ts

@@ -36,6 +36,8 @@ export interface NavMenuNode {
   tag?: string;
   tagColor?: string;
   permissionId?: string;
+  /** Shown to the super admin only, whatever the rid (see utils/superAdmin.ts). */
+  superAdminOnly?: boolean;
   header?: string;
   items?: NavMenuNode[];
   submenu?: NavMenuNode[];
@@ -109,7 +111,8 @@ export const adminMenu: NavMenuNode[] = [
             name: 'List',
             slug: 'app-user-list',
             i18n: 'لیست مشتریان تک',
-            permissionId:"persons.list.client.single"
+            permissionId:"persons.list.client.single",
+            superAdminOnly: true
           },
           {
             url: '/customer/banker-list',
@@ -121,7 +124,8 @@ export const adminMenu: NavMenuNode[] = [
             // API route it points at (admin/customers-omde/banker/list) is
             // gated on exactly this rid, so an unauthorized click 403'd.
             // Filled in to match what the server actually enforces.
-            permissionId:"persons.list.client.omde"
+            permissionId:"persons.list.client.omde",
+            superAdminOnly: true
           },
           {
             // legacy navMenuItems.js:90 spelled this with a capital S while the route
@@ -133,7 +137,8 @@ export const adminMenu: NavMenuNode[] = [
             i18n: 'لیست مغازه داران حضوری',
             // Same fix as banker-list above — the backing endpoint
             // (admin/customers-omde/shopkeeper/list) requires this rid.
-            permissionId:"persons.list.client.omde"
+            permissionId:"persons.list.client.omde",
+            superAdminOnly: true
           },
         ]
       },
@@ -145,6 +150,7 @@ export const adminMenu: NavMenuNode[] = [
         name: 'branch and workshop',
         icon: 'GridIcon',
         i18n: 'شعب و کارگاه',
+        superAdminOnly: true,
         submenu: [
           {
             url: null,
@@ -227,14 +233,16 @@ export const adminMenu: NavMenuNode[] = [
             name: 'orderOmdeList',
             slug: 'order-omde-list',
             i18n: 'ثبت سفارش تک',
-            permissionId:"order.create"
+            permissionId:"order.create",
+            superAdminOnly: true
           },
           {
             url: '/order/list',
             name: 'orderList',
             slug: 'order-list',
             i18n: 'لیست سفارش های تک',
-            permissionId:"order.list"
+            permissionId:"order.list",
+            superAdminOnly: true
           },
           {
             url: '/order/make',
@@ -461,7 +469,8 @@ export const adminMenu: NavMenuNode[] = [
             name: 'wallet Management',
             slug: 'manage-const',
             i18n: 'مدیریت کیف پول',
-            permissionId:"config.wallet"
+            permissionId:"config.wallet",
+            superAdminOnly: true
           },
           // D27 — Tahesab / Zarrin integration.
           {