Add custom fields + warranty plugin, rework settings into two-pane shell

Feature work from the 2026-07 session:

Settings IA
- Replace the flat 27-card settings hub with a persistent two-pane shell
  (SettingsLayout.vue): grouped, searchable left rail + content pane.
- Nest all settings/* routes under the shell via router post-processing;
  shared nav catalog in settingsNav.js. Group by asset class (PCs, Printers,
  Equipment, Network) so per-type settings stop scattering.

Custom fields (core)
- customfields + customfieldvalues tables (migration 7d14), CRUD API at
  /api/customfields, per-asset value get/save.
- Settings management page + reusable CustomFieldsSection (detail) and
  CustomFieldsInputs (form) wired into all four asset types.

Warranty (new plugin)
- plugins/warranty: warranties + warrantyassets (migration 7d15), derived
  coverage status, provider abstraction (manual now; Dell/Lenovo/HP stubs).
- API CRUD + per-asset panel + report buckets; WarrantyPanel on all four
  detail pages; Warranties management page; Warranty report + Reports card.
- Seed warranty.* permissions.

Printer drivers
- printerdrivers table (migration 7d13) linked to printer models; drivers now
  surface on the matching printer's detail page.

Other
- PCDetail rebalanced (Network + Status + Warranty + custom fields on the right).
- Rename PCs list "Features" column to "Remote Access"; fix badge hover underline.
- Drop equipment islocationonly field.
- Centralize asset-type label/route maps into utils/assetTypes.js.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

plugins/knowledgebase/api/routes.py

@@ -16,6 +16,8 @@ from shopdb.api import (
 
 from ..models import KnowledgeBase
 
+from shopdb.api import require_permission, require_role
+
 knowledgebase_bp = Blueprint('knowledgebase', __name__)
 
 
@@ -137,6 +139,7 @@ def track_click(link_id: int):
 
 @knowledgebase_bp.route('', methods=['POST'])
 @jwt_required()
+@require_permission('kb.create')
 def create_article():
     """Create a new knowledge base article."""
     data = request.get_json()
@@ -169,6 +172,7 @@ def create_article():
 
 @knowledgebase_bp.route('/<int:link_id>', methods=['PUT'])
 @jwt_required()
+@require_permission('kb.edit')
 def update_article(link_id: int):
     """Update a knowledge base article."""
     article = KnowledgeBase.query.get(link_id)
@@ -197,6 +201,7 @@ def update_article(link_id: int):
 
 @knowledgebase_bp.route('/<int:link_id>', methods=['DELETE'])
 @jwt_required()
+@require_permission('kb.delete')
 def delete_article(link_id: int):
     """Delete (deactivate) a knowledge base article."""
     article = KnowledgeBase.query.get(link_id)