Initial commit: Port Nimara CRM (Layers 0-4)

Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/components/shared/permission-gate.tsx

@@ -0,0 +1,30 @@
+'use client';
+
+import type { ReactNode } from 'react';
+import { usePermissions } from '@/hooks/use-permissions';
+import type { RolePermissions } from '@/lib/db/schema/users';
+
+type Resource = keyof RolePermissions;
+type Action<R extends Resource> = keyof RolePermissions[R];
+
+interface PermissionGateProps<R extends Resource> {
+  resource: R;
+  action: Action<R>;
+  children: ReactNode;
+  fallback?: ReactNode;
+}
+
+export function PermissionGate<R extends Resource>({
+  resource,
+  action,
+  children,
+  fallback = null,
+}: PermissionGateProps<R>) {
+  const { can } = usePermissions();
+
+  if (!can(resource, action)) {
+    return <>{fallback}</>;
+  }
+
+  return <>{children}</>;
+}