QA hardening: security RLS fixes, Flutter 3.47.5 upgrade, UI/validation fixes

Security — enforce write authorization server-side (was UI/RPC-only):
- it_service_requests RLS: block cross-office read/edit + self-approve (QA-015)
- pass_slips RLS: owner can complete but not self-approve (QA-046)
- swap_requests RLS: scope select/update to participants + admin (QA-047)
- storage: tighten it_service_attachments + task_attachments write/delete (QA-027)
- admin_user_management edge function: allow programmers to manage users (QA-016)

Fixes:
- workforce generator "uncovered shifts" false alarms (QA-043/044)
- network-map VLAN + New-location dialog validation, disabled-until-valid (QA-048)
- de-flake time-of-day-dependent dashboard metrics test (QA-045)

Toolchain:
- upgrade to Flutter 3.47.5 / Dart 3.13.4; font_awesome_flutter 11.0.0,
  flutter_quill 11.6.0, pdfrx 2.6.5; clear resulting deprecations (QA-002)

analyze clean; 139 tests pass; web build succeeds. Report + evidence in docs/qa/.

Note: also carries the in-progress Brick model cleanup already present in the
working tree. QA-001 (AI keys public in the build) is deferred by owner decision.

Co-Authored-By: claude-flow <ruv@ruv.net>

pubspec.yaml

@@ -4,7 +4,7 @@ publish_to: 'none'
 version: 0.1.0
 
 environment:
-  sdk: ^3.10.7
+  sdk: ^3.12.0
 
 dependencies:
   flutter:
@@ -15,7 +15,7 @@ dependencies:
   flutter_riverpod: ^2.6.1
   go_router: ^14.6.2
   flutter_dotenv: ^5.2.1
-  font_awesome_flutter: ^10.7.0
+  font_awesome_flutter: ^11.0.0
   google_fonts: ^8.0.2
   audioplayers: ^6.1.0
   geolocator: ^13.0.1
@@ -24,12 +24,11 @@ dependencies:
   flutter_map: ^8.2.2
   latlong2: ^0.9.0
   flutter_typeahead: ^4.1.0
-  flutter_quill: ^11.5.0
+  flutter_quill: ^11.6.0
   file_picker: ^10.3.10
   pdf: ^3.11.3
-  pdfrx: ^2.2.24
+  pdfrx: ^2.6.0
   printing: ^5.14.2
-  flutter_keyboard_visibility: ^5.4.1
   awesome_snackbar_content: ^0.1.8
   permission_handler: ^12.0.1
   flutter_local_notifications: ^20.1.0
@@ -51,7 +50,6 @@ dependencies:
   google_mlkit_face_detection: ^0.13.2
   qr_flutter: ^4.1.0
   flutter_image_compress: ^2.4.0
-  dio: ^5.1.2
   package_info_plus: ^9.0.0
   share_plus: ^10.0.0
   pub_semver: ^2.1.1
@@ -78,6 +76,7 @@ flutter:
     - assets/
     - assets/fonts/
 
+# flutter_typeahead pulls in 5.x transitively, and 5.x breaks the Android build (c31187ef).
 dependency_overrides:
   flutter_keyboard_visibility: ^6.0.0