feat(web): add role-aware dashboard access cues

apps/web/app/dashboard/settings/staff/page.tsx

@@ -5,6 +5,8 @@ import { z } from "zod";
 import { useForm } from "react-hook-form";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { apiFetch } from "@/lib/api-client";
+import { UnauthorizedNotice } from "@/components/auth/UnauthorizedNotice";
+import { useAuth } from "@/providers/AuthProvider";
 import { useSubscription } from "@/providers/SubscriptionProvider";
 
 type StaffRole =
@@ -88,7 +90,9 @@ function StatusBadge({ isActive }: { isActive: boolean }) {
 }
 
 export default function StaffManagementPage() {
+  const { user } = useAuth();
   const { isWriteLocked } = useSubscription();
+  const canManageStaff = user?.role === "SUPER_ADMIN" || user?.role === "CLINIC_ADMIN";
   const [staff, setStaff] = useState<StaffUser[]>([]);
   const [isLoading, setIsLoading] = useState(true);
   const [isCreateOpen, setIsCreateOpen] = useState(false);
@@ -114,6 +118,11 @@ export default function StaffManagementPage() {
   });
 
   useEffect(() => {
+    if (!canManageStaff) {
+      setIsLoading(false);
+      return;
+    }
+
     const loadStaff = async () => {
       setIsLoading(true);
       setToast(null);
@@ -135,7 +144,15 @@ export default function StaffManagementPage() {
     };
 
     void loadStaff();
-  }, []);
+  }, [canManageStaff]);
+
+  if (!canManageStaff) {
+    return (
+      <main className="space-y-4 p-4 md:p-6">
+        <UnauthorizedNotice message="Only clinic administrators can view and manage staff accounts." />
+      </main>
+    );
+  }
 
   const pagedStaff = useMemo(() => {
     const start = (page - 1) * PAGE_SIZE;

apps/web/components/auth/UnauthorizedNotice.tsx

@@ -0,0 +1,14 @@
+"use client";
+
+export const UnauthorizedNotice = ({
+  title = "Access Restricted",
+  message,
+}: {
+  title?: string;
+  message: string;
+}) => (
+  <section className="rounded-xl border border-amber-200 bg-amber-50 p-4 text-sm text-amber-800 shadow-sm">
+    <h2 className="text-base font-semibold text-amber-900">{title}</h2>
+    <p className="mt-1">{message}</p>
+  </section>
+);

apps/web/layouts/DashboardLayout.tsx

@@ -21,7 +21,8 @@ const NAV = [
 
 export const DashboardLayout = ({ children }: { children: React.ReactNode }) => {
   const pathname = usePathname();
-  const { logout } = useAuth();
+  const { logout, user } = useAuth();
+  const visibleNav = NAV.filter((item) => item.roles === "ALL" || item.roles.includes(user?.role ?? ""));
 
   return (
     <SubscriptionProvider>
@@ -32,28 +33,19 @@ export const DashboardLayout = ({ children }: { children: React.ReactNode }) =>
               LumenHealth
             </p>
             <nav className="space-y-2">
-              {NAV.map((item) =>
-                item.disabled ? (
-                  <span
-                    key={item.label}
-                    className="block rounded-md border border-slate-200 px-3 py-2 text-sm text-slate-400 line-through"
-                  >
-                    {item.label}
-                  </span>
-                ) : (
-                  <Link
-                    key={item.href}
-                    href={item.href}
-                    className={`block rounded-md border px-3 py-2 text-sm font-medium ${
-                      pathname === item.href
-                        ? "border-teal-700 bg-teal-50 text-teal-900"
-                        : "border-slate-200 text-slate-700 hover:bg-slate-50"
-                    }`}
-                  >
-                    {item.label}
-                  </Link>
-                ),
-              )}
+              {visibleNav.map((item) => (
+                <Link
+                  key={item.href}
+                  href={item.href}
+                  className={`block rounded-md border px-3 py-2 text-sm font-medium ${
+                    pathname === item.href
+                      ? "border-teal-700 bg-teal-50 text-teal-900"
+                      : "border-slate-200 text-slate-700 hover:bg-slate-50"
+                  }`}
+                >
+                  {item.label}
+                </Link>
+              ))}
             </nav>
 
             <button