[comp] Production Deploy

[github-actions]

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

[cursor]

PR Summary

Medium Risk
Introduces new RBAC-protected endpoints and permission resource (portal) for self-service training completion; mistakes could break employee onboarding flows or unintentionally widen/narrow access. Also changes client-side data fetching/mutation behavior, which may affect completion state consistency and email triggering.

Overview
Migrates portal training video completion from a Next.js route that wrote directly to the DB to RBAC-guarded NestJS endpoints: GET /v1/training/completions and POST /v1/training/completions/:videoId/complete (with member/org validation, video ID validation, and optional completion-email triggering).

Adds a new portal permission resource (granted to owner, admin, employee, contractor; excluded from auditor) and wires portal UI (EmployeeTasksList, GeneralTrainingAccordionItem, VideoCarousel) to a new useTrainingCompletions SWR hook for reactive progress updates and optimistic completion writes. Removes the old apps/portal mark-video-completed API route, updates OpenAPI, and adds regression/controller tests to lock down permissions and decorator requirements.

^{Written by Cursor Bugbot for commit fce34d3. This will update automatically on new commits. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app (staging)	Ready	Preview, Comment	Mar 13, 2026 5:27pm
portal (staging)	Ready	Preview, Comment	Mar 13, 2026 5:27pm

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

[claudfuen]

🎉 This PR is included in version 3.3.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀