feature: RBAC + Clinical Audit Logging

VigilCareClinicalAPI/Controllers/AnalyticsController.cs

@@ -1,3 +1,4 @@
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 
 
@@ -7,6 +8,7 @@ using Microsoft.AspNetCore.Mvc;
 [ApiController]
 [Route("api/v1/analytics")]
 [Produces("application/json")]
+[AuthorizePermission(ClinicalPermissions.AnalyticsRead)]
 public class AnalyticsController : ControllerBase
 {
     private readonly IAnalyticsService _analytics;
@@ -104,4 +106,4 @@ public class AnalyticsController : ControllerBase
         var result = await _analytics.SearchPatientsAsync(q, department, status, page, pageSize);
         return Ok(ApiResponse<object>.Ok(result));
     }
-}
+}