Gate inventory, programmes, partners, and procurement web pages on functional RBAC.

Hide workspace navigation links unless the user holds matching catalog privileges, with smart module home URLs.

Co-authored-by: Cursor <cursoragent@cursor.com>
