feat(media): scaffold mvp1 media and portfolio foundation

apps/admin/src/lib/access.test.ts

@@ -31,6 +31,10 @@ describe("admin route access rules", () => {
       permission: "media:read",
       scope: "team",
     })
+    expect(getRequiredPermission("/portfolio")).toEqual({
+      permission: "media:read",
+      scope: "team",
+    })
     expect(getRequiredPermission("/users")).toEqual({
       permission: "users:read",
       scope: "own",

apps/admin/src/lib/access.ts

@@ -57,6 +57,13 @@ const guardRules: GuardRule[] = [
       scope: "team",
     },
   },
+  {
+    route: /^\/portfolio(?:\/|$)/,
+    requirement: {
+      permission: "media:read",
+      scope: "team",
+    },
+  },
   {
     route: /^\/users(?:\/|$)/,
     requirement: {