feat: ticketing system with technical/sales roles and department routing

Backend:
- Added TECHNICAL and SALES roles to UserRole enum
- Added TicketDepartment, TicketStatus, TicketPriority enums
- Created Ticket and TicketMessage entities with relationships
- Created TicketsModule with full CRUD service and controller
- Ticket routing: users create tickets to technical/sales departments
- Staff reply updates status (answered), user reply sets waiting
- Role-based access: technical staff sees technical tickets, sales sees sales tickets
- Admin sees all tickets with stats (total, open, avg response time)
- Updated access control: technical role has admin-level access (except role change)
- Sales role can view users and handle sales tickets
- Clusters controller: technical role can manage clusters/pools
- Users controller: technical/sales can view users, only admin changes roles

Frontend:
- New user ticket pages: list (with create form) + detail (chat-style messages)
- Staff ticket panel: filtered by department with status filters
- Admin all-tickets page with statistics dashboard and department/status filters
- Updated sidebar: role-based nav items (admin/technical/sales sections)
- Role badges in header for technical (blue) and sales (green)
- Admin users page: new roles in dropdowns, role change restricted to admin only
- Deploy page: technical role gets cluster selection access like admin

backend/src/clusters/clusters.controller.ts

@@ -41,50 +41,50 @@ export class ClustersController {
   // ─── Cluster admin endpoints ──────────────────────────────────────
 
   @Post()
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Register a new Kubernetes cluster (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Register a new Kubernetes cluster (Admin/Technical)' })
   async create(@Body() dto: CreateClusterDto) {
     return this.clustersService.create(dto);
   }
 
   @Get()
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'List all clusters (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'List all clusters (Admin/Technical)' })
   async findAll() {
     return this.clustersService.findAll();
   }
 
   @Get(':id/resources')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Get cluster resource usage — nodes, CPU, memory, pods (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Get cluster resource usage — nodes, CPU, memory, pods (Admin/Technical)' })
   async getClusterResources(@Param('id') id: string) {
     return this.clustersService.getClusterResources(id);
   }
 
   @Get(':id')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Get cluster details (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Get cluster details (Admin/Technical)' })
   async findOne(@Param('id') id: string) {
     return this.clustersService.findOne(id);
   }
 
   @Patch(':id')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Update cluster configuration (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Update cluster configuration (Admin/Technical)' })
   async update(@Param('id') id: string, @Body() dto: UpdateClusterDto) {
     return this.clustersService.update(id, dto);
   }
 
   @Post(':id/test')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Test connectivity to a registered cluster (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Test connectivity to a registered cluster (Admin/Technical)' })
   async testConnection(@Param('id') id: string) {
     return this.clustersService.testClusterById(id);
   }
 
   @Delete(':id')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Remove a cluster (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Remove a cluster (Admin/Technical)' })
   async delete(@Param('id') id: string) {
     await this.clustersService.delete(id);
     return { message: 'Cluster deleted' };
@@ -93,36 +93,36 @@ export class ClustersController {
   // ─── Cluster Pool admin endpoints ─────────────────────────────────
 
   @Post('pools')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Create a cluster pool for load balancing (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Create a cluster pool for load balancing (Admin/Technical)' })
   async createPool(@Body() dto: CreateClusterPoolDto) {
     return this.clustersService.createPool(dto);
   }
 
   @Get('pools')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'List all cluster pools (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'List all cluster pools (Admin/Technical)' })
   async findAllPools() {
     return this.clustersService.findAllPools();
   }
 
   @Get('pools/:id')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Get cluster pool details (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Get cluster pool details (Admin/Technical)' })
   async findOnePool(@Param('id') id: string) {
     return this.clustersService.findOnePool(id);
   }
 
   @Patch('pools/:id')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Update cluster pool (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Update cluster pool (Admin/Technical)' })
   async updatePool(@Param('id') id: string, @Body() dto: UpdateClusterPoolDto) {
     return this.clustersService.updatePool(id, dto);
   }
 
   @Delete('pools/:id')
-  @Roles(UserRole.ADMIN)
-  @ApiOperation({ summary: 'Delete a cluster pool (Admin only)' })
+  @Roles(UserRole.ADMIN, UserRole.TECHNICAL)
+  @ApiOperation({ summary: 'Delete a cluster pool (Admin/Technical)' })
   async deletePool(@Param('id') id: string) {
     await this.clustersService.deletePool(id);
     return { message: 'Cluster pool deleted' };