feat(TRA-373): permission management for meeting moderation
- Add meeting:moderate capability to trainer role in ROLE_CAPABILITIES
- IsMeetingModerator permission class already in place from TRA-372 (training:signoff or meeting:moderate)
- Moderation endpoints (mute/unmute/kick, screen-share, session lifecycle) restricted to meeting:moderate
- Add migration 0003 for MeetingParticipant.attendance_session FK
- Add integration tests: 18 cases covering trainer allowed / learner 403 / unauthenticated 401
for mute, unmute, kick, screen share (start/stop), call session (start/end/view), audit log
Co-Authored-By: Paperclip <noreply@paperclip.ing>
1527c649e6