refactor: remove backward compatibility layer for permissions

- Delete app/core/permissions.py (VendorPermissions enum, PermissionGroups)
- Update all code to use permission_discovery_service directly:
  - app/api/deps.py: get_user_permissions() uses discovery service
  - app/modules/tenancy/models/vendor.py: get_all_permissions() uses discovery
  - app/modules/tenancy/routes/api/vendor_team.py: use string literals
  - app/modules/tenancy/services/vendor_team_service.py: use discovery service
  - scripts/init_production.py: use discovery service for presets

Permissions are now fully module-driven:
- Each module defines permissions in definition.py
- PermissionDiscoveryService aggregates all permissions
- Role presets reference permission IDs directly

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/modules/tenancy/services/vendor_team_service.py

@@ -16,7 +16,14 @@ from typing import Any
 
 from sqlalchemy.orm import Session
 
-from app.core.permissions import get_preset_permissions
+from app.modules.tenancy.services.permission_discovery_service import (
+    permission_discovery_service,
+)
+
+
+def get_preset_permissions(preset_name: str) -> set[str]:
+    """Get permissions for a preset role."""
+    return permission_discovery_service.get_preset_permissions(preset_name)
 from app.modules.tenancy.exceptions import (
     CannotRemoveOwnerException,
     InvalidInvitationTokenException,