feat(admin, settlement, dashboard): strengthen permission gating and billing workflows

src/app/admin/(shell)/admin-roles/page.tsx

@@ -1,6 +1,8 @@
 import { ModuleScaffold } from "@/components/admin/module-scaffold";
+import { AdminPermissionGate } from "@/components/admin/admin-permission-gate";
 import { AdminRolesConsole } from "@/modules/admin-roles/admin-roles-console";
 import { buildPageMetadata } from "@/lib/page-metadata";
+import { PRD_ADMIN_ROLE_MANAGE } from "@/lib/admin-prd";
 import type { Metadata } from "next";
 
 export const metadata: Metadata = buildPageMetadata("adminRoles", "title");
@@ -8,7 +10,9 @@ export const metadata: Metadata = buildPageMetadata("adminRoles", "title");
 export default function AdminRolesPage() {
   return (
     <ModuleScaffold>
-      <AdminRolesConsole />
+      <AdminPermissionGate requiredAny={[PRD_ADMIN_ROLE_MANAGE]}>
+        <AdminRolesConsole />
+      </AdminPermissionGate>
     </ModuleScaffold>
   );
 }