Add workshops CMS API with schedule, registrations, and public storefront routes.

Includes SQL migrations, Prisma models, dashboard CRUD, registration status workflow, and website OpenAPI updates for workshop listing and signup.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/customers/customers.service.ts

@@ -182,7 +182,7 @@ export class CustomersService {
     actor: AuthUser,
   ) {
     const businessId = BigInt(businessIdRaw);
-    await this.assertPermission(businessId, actor.id, 'orders.create');
+    await this.assertCustomerSearchPermission(businessId, actor.id);
 
     const q = query.q.trim();
     const limit = Math.min(Math.max(query.limit ?? 20, 1), 50);
@@ -476,6 +476,29 @@ export class CustomersService {
     return user.email ? `${user.email} · ${user.cellNumber}` : user.cellNumber;
   }
 
+  private async assertCustomerSearchPermission(
+    businessId: bigint,
+    userId: bigint,
+  ) {
+    const allowed =
+      (await this.permissions.hasBusinessPermission(
+        userId,
+        businessId,
+        'orders.create',
+      )) ||
+      (await this.permissions.hasBusinessPermission(
+        userId,
+        businessId,
+        'workshops.update',
+      ));
+
+    if (!allowed) {
+      throw new ForbiddenException(
+        'Missing permission to search customers for this business',
+      );
+    }
+  }
+
   private async assertPermission(
     businessId: bigint,
     userId: bigint,