- Add useCommandPaletteSafe hook that doesn't throw when provider is missing
- Update CommandPaletteButton to return null when provider is unavailable
- Prevents crashes on routes outside _layout+/* that don't have CommandPaletteProvider
- Resolves issue where QR linking routes and other non-layout routes would crash

This ensures the header can be safely used across all routes without requiring
every route to be wrapped in CommandPaletteRoot.

…earch

- Add commandPaletteSearch permission entity to properly control search access
- Remove invalid CURATOR role references, use actual system roles (OWNER, ADMIN, SELF_SERVICE, BASE)
- Implement proper booking permission checks using canSeeAllBookings flag
- Restrict team member search based on custody relationships for BASE/SELF_SERVICE users
- Add complete ADMIN and OWNER role definitions to permission mapping
- Ensure all search results respect organization-level permission settings

This addresses critical security vulnerabilities where users could access data beyond their permission level through the command palette search functionality.

…d palette

- Add workspace type awareness to command palette search API
- Filter out booking and team member results for personal workspaces
- Hide booking/team navigation items and quick actions for personal users
- Update search placeholder text to accurately reflect available search scope
- Maintain proper permission checks while respecting workspace limitations

Personal workspaces can now only search assets, kits, and locations, which aligns with their feature limitations and prevents confusion.

…nality-lintkk

…alette

- Add "Kits" navigation option accessible to all user roles
- Add "Create kit" action for ADMIN/OWNER roles only
- Restrict "Settings" and "Dashboard" navigation to ADMIN/OWNER roles
- Restrict "Create Asset" action to ADMIN/OWNER roles only
- Fix "Team" navigation to exclude BASE/SELF_SERVICE users properly
- Improve bookings visibility logic to combine workspace and permission checks
- Update team navigation href to point directly to users page
- Enhance invite user action with proper workspace and permission filtering

Role-based access now matches sidebar navigation patterns:
- BASE/SELF_SERVICE: Assets, Kits, Locations, Bookings (if available)
- ADMIN/OWNER: Full access including Settings, Dashboard, Team, Create actions
- Personal workspaces: Exclude booking/team features regardless of role

Ensures users only see command palette options they have permission to access.

…gration

- Export getAssets function from asset service for direct usage
- Replace getPaginatedAndFilterableAssets with direct getAssets call to avoid fetching unnecessary data
- Add comprehensive search capabilities including custom fields, custodian names, QR codes, barcodes
- Maintain 8-asset result limit and proper result formatting for command palette
- Remove code duplication and ensure consistency with asset index search behavior

Benefits:
- Custom field search now works properly in command palette
- More efficient queries without extra category/tag/team member data
- Identical search behavior between asset index and command palette
- Enhanced search includes custodian names and all related entity searches

The command palette asset search now has the same powerful search capabilities as the main asset index.