feat(backoffice): add organization admin permission assignment page (EDRFREIGHT-242)

There was no UI to assign permissions to the Organization Admin role,
even though the backend's Role→Permission endpoints
(@tria-plc/iamapi-common's role-permissions routes) were already live
and unused. Adds a dedicated page — application picker + the existing
permission checklist — that assigns/reads permissions for the fixed
Organization Admin role, linked from the Organization Admins page.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/edr-freight-web/backoffice/src/locales/am/translation.json

@@ -7492,12 +7492,22 @@
     "loadError": "አስተዳዳሪዎችን መጫን አልተሳካም።",
     "pickerError": "ድርጅቶችን መጫን አልተሳካም።",
     "addAdmin": "አስተዳዳሪ ጨምር",
+    "managePermissions": "ፍቃዶችን ያስተዳድሩ",
     "add": {
       "title": "አስተዳዳሪ ጨምር",
       "description": "የተጠቃሚ መለያ ይፍጠሩ እና በዚህ ድርጅት ውስጥ የአስተዳዳሪ መዳረሻ ይስጡ።",
       "submit": "አስተዳዳሪ ጨምር",
       "inviteNote": "ተጠቃሚው ይፈጠራል እና የይለፍ ቃሉን እንዲያዘጋጅ የኤስኤምኤስ ግብዣ ይደርሰዋል።",
       "noUnitsOrgAdmin": "ይህ ድርጅት ክፍሎች የሉትም — አስተዳዳሪው እንደ የድርጅት አስተዳዳሪ ይጨመራል።"
+    },
+    "permissions": {
+      "title": "የድርጅት አስተዳዳሪ ፍቃዶች",
+      "subtitle": "እያንዳንዱ የድርጅት አስተዳዳሪ በመድረኩ ላይ ምን ማድረግ እንደሚችል ይምረጡ።",
+      "backToAdmins": "ወደ ድርጅት አስተዳዳሪዎች ይመለሱ",
+      "roleNotFound": "የድርጅት አስተዳዳሪ ሚና ማግኘት አልተቻለም።",
+      "saved": "የድርጅት አስተዳዳሪ ፍቃዶች ተዘምነዋል።",
+      "saveFailed": "የድርጅት አስተዳዳሪ ፍቃዶችን ማዘመን አልተቻለም።",
+      "cannotClearAll": "ተቀምጧል። ፍቃዶቹ አልተቀየሩም — የድርጅት አስተዳዳሪ ሚና ቢያንስ አንድ ፍቃድ ሊኖረው ይገባል።"
     }
   }
 }

apps/edr-freight-web/backoffice/src/locales/en/translation.json

@@ -7493,12 +7493,22 @@
     "loadError": "Failed to load admins.",
     "pickerError": "Failed to load organizations.",
     "addAdmin": "Add Admin",
+    "managePermissions": "Manage Permissions",
     "add": {
       "title": "Add Admin",
       "description": "Create a user account and grant admin access in this organization.",
       "submit": "Add Admin",
       "inviteNote": "The user is created and receives an SMS invitation to set their password.",
       "noUnitsOrgAdmin": "This organization has no units — the admin will be added as an organization admin."
+    },
+    "permissions": {
+      "title": "Organization Admin Permissions",
+      "subtitle": "Choose what every Organization Admin can do across the platform.",
+      "backToAdmins": "Back to Organization Admins",
+      "roleNotFound": "Could not find the Organization Admin role.",
+      "saved": "Organization Admin permissions updated.",
+      "saveFailed": "Failed to update Organization Admin permissions.",
+      "cannotClearAll": "Saved. Permissions were left unchanged — the Organization Admin role must keep at least one permission."
     }
   }
 }