Add viewer access to records and restrict activity log

- canView() + canViewAny() in EnforcesRoles: all SMS roles can view
- View pages for all 7 resources so viewers can open records read-only
- Custom ActivityResource restricts activity log to admin + manager only

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/Filament/User/Resources/ProductResource/Pages/ViewProduct.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources\ProductResource\Pages;
+
+use App\Filament\User\Resources\ProductResource;
+use Filament\Resources\Pages\ViewRecord;
+
+class ViewProduct extends ViewRecord
+{
+    protected static string $resource = ProductResource::class;
+}