feat(phase3): tighten group-gating on operator-irrelevant top-levels

Three targeted gates so operators no longer see admin/audit views:

- KPIs (menu_fp_dashboard) → supervisor+. Operators don't need
  dashboards; their tablet shows what they need to do next.
- Move Log (menu_fp_job_step_move) → supervisor+. Operators see
  their own moves on the tablet; this top-level menu is the
  audit-of-everyone-else view.
- Replenishment Suggestions (menu_fp_replenishment_suggestions) →
  supervisor+. Purchasing decision, not operator concern.

Other top-levels were already correctly gated:
- Sales / Configurator → estimator
- Shipping & Receiving → group_fp_receiving
- Compliance hub → supervisor+
- Configuration → manager
- Shop Floor / Quality → operator (correctly visible to floor staff)
- Operations parent stays open; child menus enforce per-action gates

Net effect: a fresh operator now sees ~5 top-level menus instead of
the previous ~10. Supervisors see ~8. Managers see all.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

fusion_plating/fusion_plating/views/fp_menu.xml

@@ -112,11 +112,13 @@
               action="action_fp_rack"
               sequence="35"/>
 
+    <!-- Phase 3 — supervisor+: replenishment is a purchasing decision. -->
     <menuitem id="menu_fp_replenishment_suggestions"
               name="Replenishment Suggestions"
               parent="menu_fp_operations"
               action="action_fp_replenishment_suggestion"
-              sequence="40"/>
+              sequence="40"
+              groups="fusion_plating.group_fusion_plating_supervisor"/>
 
     <!-- Configuration children (referencing the 7 buckets above) -->
     <menuitem id="menu_fp_replenishment_rules"