fix: ( permissions) accept payments:manage for luggage charges

apps/edr-passenger-api/src/modules/excess-baggage/excess-baggage.controller.ts

@@ -22,7 +22,14 @@ import { PASSENGER_PERMS } from '../../seed/passenger-permissions.registry';
  * included — could raise a charge.
  */
 const CanCharge = () =>
-  PassengerStaff([PASSENGER_PERMS.excessBaggage.charge, PASSENGER_PERMS.bookings.manage, PASSENGER_PERMS.admin]);
+  PassengerStaff([
+    PASSENGER_PERMS.excessBaggage.charge,
+    // Same shape as the supplementary-charge guard in payments.controller.ts: both bill a
+    // passenger and send them a pay link, so whoever manages payments can do either.
+    PASSENGER_PERMS.payments.manage,
+    PASSENGER_PERMS.bookings.manage,
+    PASSENGER_PERMS.admin,
+  ]);
 
 class UpsertBaggageAllowanceDto {
   @IsString() seatClassId: string;