feat: add RBAC for compliance dashboard

.github/workflows/accessibility-testing.yml

@@ -29,7 +29,7 @@ jobs:
 
       - name: Upload accessibility report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: accessibility-report-${{ github.sha }}
           path: test-reports/

.github/workflows/api-testing.yml

@@ -31,7 +31,7 @@ jobs:
 
       - name: Upload API test report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: api-test-report-${{ github.sha }}
           path: test-reports/

.github/workflows/backup-verification.yml

@@ -137,7 +137,7 @@ jobs:
 
       - name: Upload backup artifact for audit
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: backup-verify-${{ github.run_id }}
           path: /tmp/ci-backups/

.github/workflows/contracts.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Generate pact files
         run: npm run test:contracts:consumer
       - name: Upload pacts
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: pact-files
           path: contracts/pacts/

.github/workflows/cross-platform-testing.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: Upload compatibility report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: cross-platform-report-${{ github.sha }}
           path: test-reports/
@@ -70,7 +70,7 @@ jobs:
 
       - name: Upload Playwright report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: playwright-${{ matrix.browser }}-${{ github.sha }}
           path: e2e/test-reports/
@@ -106,7 +106,7 @@ jobs:
 
       - name: Upload mobile test report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: mobile-platform-report-${{ github.sha }}
           path: e2e/test-reports/

.github/workflows/e2e-tests.yml

@@ -2,45 +2,45 @@ name: E2E Tests
 
 on:
   push:
-    branches: [ main, master ]
+    branches: [main, master]
   pull_request:
-    branches: [ main, master ]
+    branches: [main, master]
 
 jobs:
   e2e-payment-flow:
     runs-on: ubuntu-latest
     timeout-minutes: 15
 
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
-    - name: Use Node.js
-      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.3.0
-      with:
-        node-version: '20'
-        cache: 'npm'
-
-    - name: Install root dependencies
-      run: npm install
-
-    - name: Install e2e dependencies
-      run: npm install
-      working-directory: ./e2e
-
-    - name: Install Playwright browsers
-      run: npx playwright install --with-deps chromium
-      working-directory: ./e2e
-
-    - name: Run Stellar testnet payment flow tests
-      run: npx playwright test --grep "@workflow" --project=chromium
-      working-directory: ./e2e
-      env:
-        CI: true
-
-    - name: Upload Playwright report
-      uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
-      if: always()
-      with:
-        name: playwright-report
-        path: e2e/test-reports/
-        retention-days: 14
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Use Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.3.0
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install root dependencies
+        run: npm install
+
+      - name: Install e2e dependencies
+        run: npm install
+        working-directory: ./e2e
+
+      - name: Install Playwright browsers
+        run: npx playwright install --with-deps chromium
+        working-directory: ./e2e
+
+      - name: Run Stellar testnet payment flow tests
+        run: npx playwright test --grep "@workflow" --project=chromium
+        working-directory: ./e2e
+        env:
+          CI: true
+
+      - name: Upload Playwright report
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: playwright-report
+          path: e2e/test-reports/
+          retention-days: 14

.github/workflows/integration-tests.yml

@@ -2,9 +2,9 @@ name: Integration Tests
 
 on:
   push:
-    branches: [ main, master ]
+    branches: [main, master]
   pull_request:
-    branches: [ main, master ]
+    branches: [main, master]
 
 jobs:
   integration-test:
@@ -26,37 +26,37 @@ jobs:
           --health-retries 5
 
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
-    - name: Use Node.js
-      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.3.0
-      with:
-        node-version: '20'
-        cache: 'npm'
-
-    - name: Install dependencies
-      run: npm install
-
-    - name: Run Prisma Migrations
-      run: npx prisma migrate deploy
-      working-directory: ./backend
-      env:
-        DATABASE_URL: postgresql://future_admin:test_password@localhost:5432/future_test
-
-    - name: Run Integration Tests
-      run: npm run test:integration:all
-      working-directory: ./backend
-      env:
-        DATABASE_URL: postgresql://future_admin:test_password@localhost:5432/future_test
-        NODE_ENV: test
-        JWT_SECRET: test-secret
-        STELLAR_NETWORK: testnet
-        HORIZON_URL: https://horizon-testnet.stellar.org
-
-    - name: Upload Test Reports
-      uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
-      if: always()
-      with:
-        name: integration-test-reports
-        path: backend/test-reports/
-        retention-days: 30
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Use Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.3.0
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Run Prisma Migrations
+        run: npx prisma migrate deploy
+        working-directory: ./backend
+        env:
+          DATABASE_URL: postgresql://future_admin:test_password@localhost:5432/future_test
+
+      - name: Run Integration Tests
+        run: npm run test:integration:all
+        working-directory: ./backend
+        env:
+          DATABASE_URL: postgresql://future_admin:test_password@localhost:5432/future_test
+          NODE_ENV: test
+          JWT_SECRET: test-secret
+          STELLAR_NETWORK: testnet
+          HORIZON_URL: https://horizon-testnet.stellar.org
+
+      - name: Upload Test Reports
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: integration-test-reports
+          path: backend/test-reports/
+          retention-days: 30

.github/workflows/monitoring-alerting-tests.yml

@@ -29,7 +29,7 @@ jobs:
 
       - name: Upload monitoring test report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: monitoring-test-report-${{ github.sha }}
           path: test-reports/

.github/workflows/mutation-testing.yml

@@ -40,7 +40,7 @@ jobs:
 
       - name: Upload mutation report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: mutation-report
           path: |

.github/workflows/performance.yml

@@ -38,7 +38,7 @@ jobs:
 
       - name: Upload benchmark results
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: benchmark-results
           path: backend/data/load-tests/
@@ -57,9 +57,9 @@ jobs:
       backend:
         image: node:20
         options: --health-cmd "curl -f http://localhost:3001/health || exit 1"
-                 --health-interval 10s
-                 --health-timeout 5s
-                 --health-retries 5
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -131,7 +131,7 @@ jobs:
 
       - name: Upload k6 results
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: k6-results-${{ github.sha }}
           path: backend/data/load-tests/k6-*.json
@@ -159,7 +159,7 @@ jobs:
         with:
           name: benchmark-results
           path: backend/data/load-tests/
-        continue-on-error: true  # First run won't have a baseline
+        continue-on-error: true # First run won't have a baseline
 
       - name: Run regression detection tests
         run: npx vitest run backend/tests/performance.benchmark.test.js --reporter=verbose

.github/workflows/scalability-testing.yml

@@ -37,7 +37,7 @@ jobs:
 
       - name: Upload scalability test results
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: scalability-results-${{ github.sha }}
           path: test-reports/
@@ -127,7 +127,7 @@ jobs:
 
       - name: Upload k6 scalability results
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: scalability-k6-results-${{ github.sha }}
           path: backend/data/load-tests/scalability-*.json

.github/workflows/security-pipeline.yml

@@ -57,7 +57,7 @@ jobs:
 
       - name: Upload security report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: security-report-${{ github.sha }}
           path: test-reports/

.github/workflows/test-automation-pipeline.yml

@@ -42,7 +42,7 @@ jobs:
 
       - name: Upload unit test results
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: unit-test-results-${{ github.sha }}
           path: coverage/
@@ -89,7 +89,7 @@ jobs:
 
       - name: Upload integration results
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: integration-results-${{ github.sha }}
           path: test-reports/
@@ -150,7 +150,7 @@ jobs:
 
       - name: Upload aggregated report
         if: always()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68cf68afc9e65e5a3b5a4f # v4.4.0
+        uses: actions/upload-artifact@v4
         with:
           name: pipeline-aggregated-report-${{ github.sha }}
           path: |