feat(erp-pm): integrate unified access matrix, streamline limited procurement flow, and brand as integrated project management, procurement and warehouse platform

frontend/src/lib/api.ts

@@ -250,6 +250,10 @@ async function patchData<T>(path: string, body: unknown): Promise<T> {
   const res = await request<{ data: T }>(path, { method: "PATCH", body: JSON.stringify(body) });
   return res.data;
 }
+async function putData<T>(path: string, body: unknown): Promise<T> {
+  const res = await request<{ data: T }>(path, { method: "PUT", body: JSON.stringify(body) });
+  return res.data;
+}
 async function deleteData<T>(path: string): Promise<T> {
   const res = await request<{ data: T }>(path, { method: "DELETE" });
   return res.data;
@@ -1663,9 +1667,9 @@ export const apiV26 = {
       patchData<UserRow>(`/users/${id}`, { role }),
     // لایه پنل‌ها — تخصیص پنل + سطح دسترسی و عضویت پروژه‌ای (فقط ادمین)
     setPanels: async (id: string, panels: Record<string, string>): Promise<UserRow> =>
-      patchData<UserRow>(`/users/${id}/panels`, { panels }),
+      putData<UserRow>(`/users/${id}/panels`, { panels }),
     setPanelProjects: async (id: string, project_ids: string[]): Promise<UserRow> =>
-      patchData<UserRow>(`/users/${id}/panel-projects`, { project_ids }),
+      putData<UserRow>(`/users/${id}/panel-projects`, { project_ids }),
     assignProject: async (id: string, projectId: string | null): Promise<UserRow> =>
       postData<UserRow>(`/users/${id}/project`, { project_id: projectId }),
     // همگام‌سازی هویت‌ها از Casdoor (ادمین/مدیر تدارکات) — نقش‌ها دست‌نخورده می‌مانند