fix(clients-view): add permission guard to Applications menu for tresurer (#3382)

The Applications button in the client hamburger menu was visible to all
users regardless of permissions when RBAC is enabled, because only the
child items inside the submenu had mifosxHasPermission guards and the
parent trigger button had none.

Add a combined permission check so the button only renders if the user
has at least one of: CREATE_LOAN, CREATE_SAVINGSACCOUNT,
CREATE_SHAREACCOUNT, CREATE_RECURRINGDEPOSITACCOUNT,
CREATE_FIXEDDEPOSITACCOUNT. Fixed the changes needed for the treasurer role.

Closes: WEB-844

fix(env): revert productionModeEnableRBAC default to false for backward compatibility

Co-authored-by: Ansh Varshney <your-email@example.com>

Author: ansh-varshney

src/app/clients/clients-view/clients-view.component.html

@@ -208,7 +208,17 @@ <h3 class="flex-95">
         </button>
 
         @if (isActive()) {
-          <button mat-menu-item [matMenuTriggerFor]="accountApplications">
+          <button
+            mat-menu-item
+            [matMenuTriggerFor]="accountApplications"
+            *mifosxHasPermission="[
+              'CREATE_LOAN',
+              'CREATE_SAVINGSACCOUNT',
+              'CREATE_SHAREACCOUNT',
+              'CREATE_RECURRINGDEPOSITACCOUNT',
+              'CREATE_FIXEDDEPOSITACCOUNT'
+            ]"
+          >
             <mat-icon matListIcon>
               <fa-icon icon="money-bill-alt" size="sm"></fa-icon>
             </mat-icon>