refactor: fix all P0/P1/P2 bugs and architecture issues

Bug fixes (from bugs/ directory):

- Fix cross-module DB queries in 9 modules (homework, grades, parent, diagnostic, elective, proctoring, notifications, scheduling, classes) by routing through data-access functions

- Fix shared/lib <-> auth circular dependency via new session.ts module

- Fix divide-by-zero guard in grades data-access

- Fix audit export data truncation (paginated fetch for full datasets)

- Fix missing transactions in homework grading and elective lottery

- Fix missing revalidatePath in course-plans actions

- Fix frontend permission checks using requirePermission instead of requireAuth

- Fix dashboard role routing using session.user.roles

- Fix student auth pattern (migrate getDemoStudentUser to users module)

- Fix ActionState return type handling in components

Code quality fixes:

- Remove 60+ as type assertions (replace with type guards)

- Remove non-null assertions (use optional chaining or explicit checks)

- Convert dynamic imports to static imports (grades, diagnostic)

- Add React.cache() wrapping for read functions

- Parallelize independent queries with Promise.all

- Add explicit return types to 30+ arrow functions

- Replace any with unknown + type guards

- Fix import type for type-only imports

- Add Zod validation schemas for classes and diagnostic modules

- Extract duplicate code (normalizeRoleName, normalizeBcryptHash, logger IP extraction)

- Add console.error to silent catch blocks

- Fix permission naming consistency (exam:proctor_read -> exam:proctor:read)

Architecture doc sync:

- Update 004_architecture_impact_map.md and 005_architecture_data.json

- Update management-modules-audit.md for P0-7 cross-module fix

Moved deleted proctoring event route to deletes/ folder.

src/shared/lib/permissions.ts

@@ -30,6 +30,7 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.SCHOOL_MANAGE,
     Permissions.GRADE_MANAGE,
     Permissions.USER_MANAGE,
+    Permissions.USER_PROFILE_UPDATE,
     Permissions.AI_CHAT,
     Permissions.AI_CONFIGURE,
     Permissions.SETTINGS_ADMIN,
@@ -53,6 +54,11 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.EXAM_PROCTOR_READ,
     Permissions.DIAGNOSTIC_MANAGE,
     Permissions.DIAGNOSTIC_READ,
+    Permissions.LESSON_PLAN_CREATE,
+    Permissions.LESSON_PLAN_READ,
+    Permissions.LESSON_PLAN_UPDATE,
+    Permissions.LESSON_PLAN_DELETE,
+    Permissions.LESSON_PLAN_PUBLISH,
   ],
   teacher: [
     Permissions.EXAM_CREATE,
@@ -74,6 +80,7 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.CLASS_READ,
     Permissions.CLASS_ENROLL,
     Permissions.CLASS_SCHEDULE,
+    Permissions.USER_PROFILE_UPDATE,
     Permissions.AI_CHAT,
     Permissions.ANNOUNCEMENT_READ,
     Permissions.GRADE_RECORD_MANAGE,
@@ -90,13 +97,20 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.EXAM_PROCTOR_READ,
     Permissions.DIAGNOSTIC_MANAGE,
     Permissions.DIAGNOSTIC_READ,
+    Permissions.LESSON_PLAN_CREATE,
+    Permissions.LESSON_PLAN_READ,
+    Permissions.LESSON_PLAN_UPDATE,
+    Permissions.LESSON_PLAN_DELETE,
+    Permissions.LESSON_PLAN_PUBLISH,
   ],
   student: [
     Permissions.EXAM_READ,
+    Permissions.EXAM_SUBMIT,
     Permissions.HOMEWORK_SUBMIT,
     Permissions.QUESTION_READ,
     Permissions.TEXTBOOK_READ,
     Permissions.CLASS_READ,
+    Permissions.USER_PROFILE_UPDATE,
     Permissions.AI_CHAT,
     Permissions.ANNOUNCEMENT_READ,
     Permissions.GRADE_RECORD_READ,
@@ -112,6 +126,7 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.EXAM_READ,
     Permissions.TEXTBOOK_READ,
     Permissions.CLASS_READ,
+    Permissions.USER_PROFILE_UPDATE,
     Permissions.ANNOUNCEMENT_READ,
     Permissions.GRADE_RECORD_READ,
     Permissions.ATTENDANCE_READ,
@@ -142,6 +157,7 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.CLASS_ENROLL,
     Permissions.CLASS_SCHEDULE,
     Permissions.GRADE_MANAGE,
+    Permissions.USER_PROFILE_UPDATE,
     Permissions.AI_CHAT,
     Permissions.ANNOUNCEMENT_READ,
     Permissions.GRADE_RECORD_READ,
@@ -174,6 +190,7 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.TEXTBOOK_UPDATE,
     Permissions.CLASS_READ,
     Permissions.GRADE_MANAGE,
+    Permissions.USER_PROFILE_UPDATE,
     Permissions.AI_CHAT,
     Permissions.ANNOUNCEMENT_READ,
     Permissions.GRADE_RECORD_READ,