feat: person tags system - org-level skills with self-reported and organiser-assigned sources

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

api/app/Policies/PersonTagPolicy.php

@@ -0,0 +1,53 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Organisation;
+use App\Models\PersonTag;
+use App\Models\User;
+
+final class PersonTagPolicy
+{
+    public function viewAny(User $user, Organisation $organisation): bool
+    {
+        return $user->hasRole('super_admin')
+            || $organisation->users()->where('user_id', $user->id)->exists();
+    }
+
+    public function create(User $user, Organisation $organisation): bool
+    {
+        return $this->canManageOrganisation($user, $organisation);
+    }
+
+    public function update(User $user, PersonTag $personTag, Organisation $organisation): bool
+    {
+        if ($personTag->organisation_id !== $organisation->id) {
+            return false;
+        }
+
+        return $this->canManageOrganisation($user, $organisation);
+    }
+
+    public function delete(User $user, PersonTag $personTag, Organisation $organisation): bool
+    {
+        if ($personTag->organisation_id !== $organisation->id) {
+            return false;
+        }
+
+        return $this->canManageOrganisation($user, $organisation);
+    }
+
+    private function canManageOrganisation(User $user, Organisation $organisation): bool
+    {
+        if ($user->hasRole('super_admin')) {
+            return true;
+        }
+
+        return $organisation->users()
+            ->where('user_id', $user->id)
+            ->wherePivot('role', 'org_admin')
+            ->exists();
+    }
+}

api/app/Policies/UserOrganisationTagPolicy.php

@@ -0,0 +1,40 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Organisation;
+use App\Models\User;
+use App\Models\UserOrganisationTag;
+
+final class UserOrganisationTagPolicy
+{
+    public function viewAny(User $user, Organisation $organisation): bool
+    {
+        return $user->hasRole('super_admin')
+            || $organisation->users()->where('user_id', $user->id)->exists();
+    }
+
+    public function create(User $user, Organisation $organisation): bool
+    {
+        return $user->hasRole('super_admin')
+            || $organisation->users()->where('user_id', $user->id)->exists();
+    }
+
+    public function delete(User $user, UserOrganisationTag $tag, Organisation $organisation): bool
+    {
+        if ($tag->organisation_id !== $organisation->id) {
+            return false;
+        }
+
+        return $user->hasRole('super_admin')
+            || $organisation->users()->where('user_id', $user->id)->exists();
+    }
+
+    public function sync(User $user, Organisation $organisation): bool
+    {
+        return $user->hasRole('super_admin')
+            || $organisation->users()->where('user_id', $user->id)->exists();
+    }
+}