feat(dashboard): add Roles CRUD with permission-based menu filtering

- Roles CRUD: List/Create/Update/Delete actions, controller, requests
- Roles Vue pages: Index, Create, Edit (Options API, DashboardLayout)
- SidebarNav: filter menu items by user permissions via Inertia shared data
- HandleInertiaRequests: share permissions and roles arrays to frontend
- HttpKernel: register dashboard.permission middleware alias
- SidebarNavItem: add shield-check icon mapping

app/Containers/Dashboard/Actions/Roles/CreateRoleAction.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Containers\Dashboard\Actions\Roles;
+
+use Spatie\Permission\Models\Role;
+
+class CreateRoleAction
+{
+    public function run(array $data): Role
+    {
+        $role = Role::create(['name' => $data['name']]);
+
+        if (!empty($data['permissions'])) {
+            $role->syncPermissions($data['permissions']);
+        }
+
+        return $role;
+    }
+}

app/Containers/Dashboard/Actions/Roles/DeleteRoleAction.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Containers\Dashboard\Actions\Roles;
+
+use Spatie\Permission\Models\Role;
+
+class DeleteRoleAction
+{
+    public function run(Role $role): void
+    {
+        $role->delete();
+    }
+}

app/Containers/Dashboard/Actions/Roles/ListRolesAction.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Containers\Dashboard\Actions\Roles;
+
+use Spatie\Permission\Models\Role;
+
+class ListRolesAction
+{
+    public function run(): array
+    {
+        $roles = Role::with('permissions')->orderBy('name')->get();
+
+        return [
+            'roles' => $roles,
+        ];
+    }
+}

app/Containers/Dashboard/Actions/Roles/UpdateRoleAction.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Containers\Dashboard\Actions\Roles;
+
+use Spatie\Permission\Models\Role;
+
+class UpdateRoleAction
+{
+    public function run(Role $role, array $data): Role
+    {
+        $role->update(['name' => $data['name']]);
+
+        $role->syncPermissions($data['permissions'] ?? []);
+
+        return $role;
+    }
+}

app/Containers/Dashboard/UI/WEB/Controllers/RolesController.php

@@ -0,0 +1,98 @@
+<?php
+
+namespace App\Containers\Dashboard\UI\WEB\Controllers;
+
+use App\Containers\Dashboard\Actions\Roles\CreateRoleAction;
+use App\Containers\Dashboard\Actions\Roles\DeleteRoleAction;
+use App\Containers\Dashboard\Actions\Roles\ListRolesAction;
+use App\Containers\Dashboard\Actions\Roles\UpdateRoleAction;
+use App\Containers\Dashboard\UI\WEB\Requests\StoreRoleRequest;
+use App\Containers\Dashboard\UI\WEB\Requests\UpdateRoleRequest;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Inertia\Inertia;
+use Inertia\Response;
+use Spatie\Permission\Models\Permission;
+use Spatie\Permission\Models\Role;
+
+class RolesController extends Controller
+{
+    public function __construct(
+        private readonly ListRolesAction $listRolesAction,
+        private readonly CreateRoleAction $createRoleAction,
+        private readonly UpdateRoleAction $updateRoleAction,
+        private readonly DeleteRoleAction $deleteRoleAction,
+    ) {}
+
+    public function index(): Response
+    {
+        $data = $this->listRolesAction->run();
+
+        return Inertia::render('Dashboard/Roles/Index', $data);
+    }
+
+    public function create(): Response
+    {
+        $permissions = Permission::orderBy('name')->get(['id', 'name']);
+
+        return Inertia::render('Dashboard/Roles/Create', [
+            'permissions' => $permissions,
+        ]);
+    }
+
+    public function store(StoreRoleRequest $request): RedirectResponse
+    {
+        try {
+            $this->createRoleAction->run($request->validated());
+
+            return redirect()->route('dashboard.roles.index')
+                ->with('success', 'Роль успешно создана!');
+        } catch (\Exception $e) {
+            return back()
+                ->withInput()
+                ->with('error', 'Ошибка при создании роли: ' . $e->getMessage());
+        }
+    }
+
+    public function edit(Role $role): Response
+    {
+        $role->load('permissions');
+        $permissions = Permission::orderBy('name')->get(['id', 'name']);
+
+        return Inertia::render('Dashboard/Roles/Edit', [
+            'role' => [
+                'id' => $role->id,
+                'name' => $role->name,
+                'permissions' => $role->permissions->pluck('name')->toArray(),
+            ],
+            'permissions' => $permissions,
+        ]);
+    }
+
+    public function update(UpdateRoleRequest $request, Role $role): RedirectResponse
+    {
+        try {
+            $this->updateRoleAction->run($role, $request->validated());
+
+            return redirect()->route('dashboard.roles.index')
+                ->with('success', 'Роль успешно обновлена!');
+        } catch (\Exception $e) {
+            return back()
+                ->withInput()
+                ->with('error', 'Ошибка при обновлении роли: ' . $e->getMessage());
+        }
+    }
+
+    public function destroy(Role $role): RedirectResponse
+    {
+        try {
+            $this->deleteRoleAction->run($role);
+
+            return redirect()->route('dashboard.roles.index')
+                ->with('success', 'Роль успешно удалена!');
+        } catch (\Exception $e) {
+            return back()
+                ->with('error', 'Ошибка при удалении роли: ' . $e->getMessage());
+        }
+    }
+}

app/Containers/Dashboard/UI/WEB/Requests/StoreRoleRequest.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Containers\Dashboard\UI\WEB\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreRoleRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255', 'unique:roles,name'],
+            'permissions' => ['nullable', 'array'],
+            'permissions.*' => ['string', 'exists:permissions,name'],
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'name.required' => 'Название роли обязательно для заполнения',
+            'name.unique' => 'Роль с таким названием уже существует',
+        ];
+    }
+}

app/Containers/Dashboard/UI/WEB/Requests/UpdateRoleRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Containers\Dashboard\UI\WEB\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class UpdateRoleRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255', Rule::unique('roles', 'name')->ignore($this->route('role'))],
+            'permissions' => ['nullable', 'array'],
+            'permissions.*' => ['string', 'exists:permissions,name'],
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'name.required' => 'Название роли обязательно для заполнения',
+            'name.unique' => 'Роль с таким названием уже существует',
+        ];
+    }
+}