Filament moderne (groupes nav, 4 charts, filtres/badges) + Filament Shield (rôles/permissions) + noms exos localisés dans routines

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

functional/users/src/Models/User.php

@@ -15,6 +15,7 @@ use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
 use Laravel\Sanctum\HasApiTokens;
 use NotificationChannels\WebPush\HasPushSubscriptions;
+use Spatie\Permission\Traits\HasRoles;
 
 /**
  * @property string $locale
@@ -28,12 +29,12 @@ use NotificationChannels\WebPush\HasPushSubscriptions;
 #[UseFactory(UserFactory::class)]
 class User extends Authenticatable implements FilamentUser
 {
-    use HasApiTokens, HasFactory, HasPushSubscriptions, Notifiable;
+    use HasApiTokens, HasFactory, HasPushSubscriptions, HasRoles, Notifiable;
 
-    /** Accès au back-office Filament (à affiner : rôle admin plus tard). */
+    /** Accès au back-office Filament : réservé aux rôles "super_admin" ou "admin" (Filament Shield). */
     public function canAccessPanel(Panel $panel): bool
     {
-        return true;
+        return $this->hasAnyRole(['super_admin', 'admin']);
     }
 
     /**