Add custom fields + warranty plugin, rework settings into two-pane shell

Feature work from the 2026-07 session:

Settings IA
- Replace the flat 27-card settings hub with a persistent two-pane shell
  (SettingsLayout.vue): grouped, searchable left rail + content pane.
- Nest all settings/* routes under the shell via router post-processing;
  shared nav catalog in settingsNav.js. Group by asset class (PCs, Printers,
  Equipment, Network) so per-type settings stop scattering.

Custom fields (core)
- customfields + customfieldvalues tables (migration 7d14), CRUD API at
  /api/customfields, per-asset value get/save.
- Settings management page + reusable CustomFieldsSection (detail) and
  CustomFieldsInputs (form) wired into all four asset types.

Warranty (new plugin)
- plugins/warranty: warranties + warrantyassets (migration 7d15), derived
  coverage status, provider abstraction (manual now; Dell/Lenovo/HP stubs).
- API CRUD + per-asset panel + report buckets; WarrantyPanel on all four
  detail pages; Warranties management page; Warranty report + Reports card.
- Seed warranty.* permissions.

Printer drivers
- printerdrivers table (migration 7d13) linked to printer models; drivers now
  surface on the matching printer's detail page.

Other
- PCDetail rebalanced (Network + Status + Warranty + custom fields on the right).
- Rename PCs list "Features" column to "Remote Access"; fix badge hover underline.
- Drop equipment islocationonly field.
- Centralize asset-type label/route maps into utils/assetTypes.js.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

shopdb/core/api/applications.py

@@ -53,6 +53,8 @@ def _require_computer_models():
     return models, None
 
 
+from shopdb.utils.authz import require_permission, require_role
+
 applications_bp = Blueprint('applications', __name__)
 
 
@@ -140,6 +142,7 @@ def get_application(app_id: int):
 
 @applications_bp.route('', methods=['POST'])
 @jwt_required()
+@require_permission('applications.create')
 def create_application():
     """Create a new application."""
     data = request.get_json()
@@ -182,6 +185,7 @@ def create_application():
 
 @applications_bp.route('/<int:app_id>', methods=['PUT'])
 @jwt_required()
+@require_permission('applications.edit')
 def update_application(app_id: int):
     """Update an application."""
     app = Application.query.get(app_id)
@@ -226,6 +230,7 @@ def update_application(app_id: int):
 
 @applications_bp.route('/<int:app_id>', methods=['DELETE'])
 @jwt_required()
+@require_permission('applications.delete')
 def delete_application(app_id: int):
     """Delete (deactivate) an application."""
     app = Application.query.get(app_id)
@@ -258,6 +263,7 @@ def list_versions(app_id: int):
 
 @applications_bp.route('/<int:app_id>/versions', methods=['POST'])
 @jwt_required()
+@require_permission('applications.create')
 def create_version(app_id: int):
     """Create a new version for an application."""
     app = Application.query.get(app_id)
@@ -348,6 +354,7 @@ def list_machine_applications(machine_id: int):
 
 @applications_bp.route('/machines/<int:machine_id>', methods=['POST'])
 @jwt_required()
+@require_permission('applications.create')
 def install_application(machine_id: int):
     """Install an application on a computer."""
     models, err = _require_computer_models()
@@ -399,6 +406,7 @@ def install_application(machine_id: int):
 
 @applications_bp.route('/machines/<int:machine_id>/<int:app_id>', methods=['DELETE'])
 @jwt_required()
+@require_permission('applications.delete')
 def uninstall_application(machine_id: int, app_id: int):
     """Uninstall an application from a computer."""
     models, err = _require_computer_models()
@@ -423,6 +431,7 @@ def uninstall_application(machine_id: int, app_id: int):
 
 @applications_bp.route('/machines/<int:machine_id>/<int:app_id>', methods=['PUT'])
 @jwt_required()
+@require_permission('applications.edit')
 def update_installed_app(machine_id: int, app_id: int):
     """Update installed application (e.g., change version)."""
     models, err = _require_computer_models()
@@ -468,6 +477,7 @@ def list_support_teams():
 
 @applications_bp.route('/supportteams', methods=['POST'])
 @jwt_required()
+@require_permission('applications.create')
 def create_support_team():
     """Create a new support team."""
     data = request.get_json()
@@ -498,6 +508,7 @@ def list_app_owners():
 
 @applications_bp.route('/appowners', methods=['POST'])
 @jwt_required()
+@require_permission('applications.create')
 def create_app_owner():
     """Create a new application owner."""
     data = request.get_json()