Repair Security

This module introduces its own permission levels for the Repair app instead of relying on Stock rights.

• Two groups are created under a new "Repair" category: "User" and "Administrator". The Administrator group automatically includes the User group, and the standard admin and root users are added to it.
• A repair User can read and modify repair orders but cannot create or delete them; they can only read repair tags and taxes.
• A repair Administrator has full rights on repair orders, repair tags, and the insufficient-quantity warning records, and can read taxes.
• The Repair menu is restricted so it is only visible to members of the Repair User group.
• On installation, the module also grants the Repair Administrator group to every user who already belongs to the standard Stock user group, so existing warehouse staff keep working without extra setup.
• The original access rules shipped with the Repair app for repair orders, repair tags and the insufficient-quantity warning are deactivated, so only the new Repair groups control access.

It touches the repair order, repair tags, account tax and stock insufficient-quantity warning models, and changes who can see and use the Repair menu.