feat(admin, settlement, dashboard): strengthen permission gating and billing workflows

src/app/admin/(shell)/settings/page.tsx

@@ -1,6 +1,8 @@
 import { ModuleScaffold } from "@/components/admin/module-scaffold";
+import { AdminPermissionGate } from "@/components/admin/admin-permission-gate";
 import { SystemSettingsScreen } from "@/modules/settings/system-settings-screen";
 import { buildPageMetadata } from "@/lib/page-metadata";
+import { PRD_SETTINGS_ACCESS_ANY } from "@/lib/admin-prd";
 import type { Metadata } from "next";
 
 export const metadata: Metadata = buildPageMetadata("common", "nav.settings");
@@ -8,7 +10,9 @@ export const metadata: Metadata = buildPageMetadata("common", "nav.settings");
 export default function AdminSettingsPage() {
   return (
     <ModuleScaffold>
-      <SystemSettingsScreen />
+      <AdminPermissionGate requiredAny={PRD_SETTINGS_ACCESS_ANY}>
+        <SystemSettingsScreen />
+      </AdminPermissionGate>
     </ModuleScaffold>
   );
 }