feat(helpdesk): align module with core list/drawer standards

- add helpdesk module pages, services, settings and tests

- standardize debtor list on drawer/grid contracts and robust filter drawer behavior

- add helpdesk aside panel navigation and settings visibility provider

- switch primary list slug to helpdesk/debitor and remove helpdesk/search compatibility

- include required core contract updates for list contracts and detail/drawer integration

modules/helpdesk/lib/Module/Helpdesk/HelpdeskAuthorizationPolicy.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace MintyPHP\Module\Helpdesk;
+
+use MintyPHP\Service\Access\AuthorizationDecision;
+use MintyPHP\Service\Access\AuthorizationPolicyInterface;
+use MintyPHP\Service\Access\PermissionService;
+
+final class HelpdeskAuthorizationPolicy implements AuthorizationPolicyInterface
+{
+    public const ABILITY_ACCESS = 'helpdesk.access';
+    public const ABILITY_SETTINGS_MANAGE = 'helpdesk.settings.manage';
+
+    public const PERMISSION_ACCESS = 'helpdesk.access';
+    public const PERMISSION_SETTINGS_MANAGE = 'helpdesk.settings.manage';
+
+    public function __construct(
+        private readonly PermissionService $permissionService
+    ) {
+    }
+
+    public function supports(string $ability): bool
+    {
+        return in_array($ability, [self::ABILITY_ACCESS, self::ABILITY_SETTINGS_MANAGE], true);
+    }
+
+    public function authorize(string $ability, array $context = []): AuthorizationDecision
+    {
+        $actorUserId = (int) ($context['actor_user_id'] ?? 0);
+        if ($actorUserId <= 0) {
+            return AuthorizationDecision::deny(403, 'forbidden');
+        }
+
+        $permissionKey = match ($ability) {
+            self::ABILITY_ACCESS => self::PERMISSION_ACCESS,
+            self::ABILITY_SETTINGS_MANAGE => self::PERMISSION_SETTINGS_MANAGE,
+            default => null,
+        };
+
+        if ($permissionKey === null) {
+            return AuthorizationDecision::deny(403, 'forbidden');
+        }
+
+        if (!$this->permissionService->userHas($actorUserId, $permissionKey)) {
+            return AuthorizationDecision::deny(403, 'forbidden');
+        }
+
+        return AuthorizationDecision::allow();
+    }
+}