[CLAUDE] Domain+Infra+App+FE-Admin: per-ContractType nested sidebar menu

User request: mỗi loại HĐ có menu riêng với 3 action Danh sách /
Thao tác / Duyệt.

Sidebar giờ 3-level under "Hợp đồng":
  Hợp đồng (group, expandable)
  ├── HĐ Thầu phụ (sub-group)
  │   ├── Danh sách → /contracts?type=1
  │   ├── Thao tác  → /contracts/new?type=1
  │   └── Duyệt      → /contracts?type=1&pendingMe=1
  ├── HĐ Giao khoán (sub-group)
  ├── HĐ NCC / Dịch vụ / Mua bán / Nguyên tắc NCC / Nguyên tắc DV
  └── ... (7 types × 4 = 28 new menu items)

BE:
- MenuKeys.cs: ContractTypeCodes array + helpers ContractTypeGroup/
  List/Create/Pending → key format Ct_<TypeCode>[_<Action>]
- DbInitializer.SeedMenuTreeAsync: loop seeds 28 entries under Contracts
- GetMyMenuTreeQuery.BuildChildren: descendants of `Contracts` inherit
  parent permission (avoid adding 28 rows to Permissions table per role)

FE:
- Layout.tsx recursive: MenuNodeRenderer dispatches group vs leaf by
  depth; nested groups collapsed by default (top-level expanded).
  Deeper levels get smaller padding/text + left border guide.
- Pattern-based resolvePath: Ct_<Type>_<Action> → URL with query.
- Contract type code → int map (matches Domain ContractType enum).
- ContractsListPage reads ?type + ?pendingMe, filters client-side.
  Header title + description reflect active filter. "← Tất cả loại"
  quick-reset button.
- ContractCreatePage new cho admin (copy từ fe-user), pre-select type
  từ ?type URL param.
- App.tsx route /contracts/new → ContractCreatePage.

Pure navigation UX; no new permissions needed. Admin + any role with
Contracts.Read see full menu; leaves click-through to filtered views.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/Backend/SolutionErp.Domain/Identity/MenuKeys.cs

@@ -17,6 +17,19 @@ public static class MenuKeys
     public const string Roles = "Roles";
     public const string Permissions = "Permissions";
 
+    // Per-contract-type menu groups + 3 action leaves each.
+    // Key format: Ct_<TypeCode>[_<Action>] — prefix `Ct_` distinguishes from
+    // top-level. Menu tree endpoint (GetMyMenuTreeQuery) treats descendants of
+    // `Contracts` as inheriting the parent permission so we don't need per-
+    // child permission rows for all roles.
+    public static readonly string[] ContractTypeCodes =
+        ["ThauPhu", "GiaoKhoan", "NhaCungCap", "DichVu", "MuaBan", "NguyenTacNcc", "NguyenTacDv"];
+
+    public static string ContractTypeGroup(string typeCode) => $"Ct_{typeCode}";
+    public static string ContractTypeList(string typeCode) => $"Ct_{typeCode}_List";
+    public static string ContractTypeCreate(string typeCode) => $"Ct_{typeCode}_Create";
+    public static string ContractTypePending(string typeCode) => $"Ct_{typeCode}_Pending";
+
     public static readonly string[] All =
     [
         Dashboard,