Permission Dependency Mapping

What was done

• Roles automatically receive the companion permissions they require, with no manual update for older roles.
• The role editor selects required permissions for you, and removes dependent ones when you remove a base permission.
• Creating or editing a payment now requires invoice viewing, invoice price visibility, and customer viewing. Expenses require customer viewing.