feat(c1): permission fields on frontend menu items and page routes + manifest migration for all plugins

app/plugins/manifest.py

@@ -43,6 +43,10 @@ class FrontendMenuItem(BaseModel):
     group: str = Field(default="", description="Optional group label_key for tree-style nesting")
     order: int = Field(default=100, description="Sort order within the sidebar")
     badge_key: str = Field(default="", description="Optional store key for badge count")
+    permission: str = Field(
+        default="",
+        description="Permission required to see/use this item (empty = any authenticated user)",
+    )
 
 
 class FrontendPageRoute(BaseModel):
@@ -58,6 +62,10 @@ class FrontendPageRoute(BaseModel):
     )
     protected: bool = Field(default=True, description="Whether the route requires authentication")
     order: int = Field(default=100, description="Sort order")
+    permission: str = Field(
+        default="",
+        description="Permission required to access this route (empty = any authenticated user)",
+    )
 
 
 class FrontendDetailTab(BaseModel):