feat(auth): add role guards and protect admin routes

src/app/(dashboard)/layout.tsx

@@ -3,15 +3,18 @@ import { Toaster } from "sonner"
 import Navbar from "@/components/layout/navbar"
 import AppSidebar from "@/components/layout/sidebar"
 import { SidebarProvider } from "@/components/ui/sidebar"
+import { auth } from "@/lib/auth"
 
 export default async function LayoutDashboard({
   children,
 }: {
   children: React.ReactNode
 }) {
+  const session = await auth()
+
   return (
     <SidebarProvider>
-      <AppSidebar />
+      <AppSidebar userRole={session?.user.role} />
       <main className="w-full">
         <Navbar />
         <div className="flex-1 p-6">{children}</div>

src/app/forbidden/page.tsx

@@ -0,0 +1,11 @@
+import Link from "next/link"
+
+export default function ForbiddenPage() {
+  return (
+    <main>
+      <h1>Acceso denegado</h1>
+      <p>No tienes permisos para acceder a esta sección.</p>
+      <Link href="/">Volver al inicio</Link>
+    </main>
+  )
+}