Gate specialty mutate CTAs on Care abilities, not only module manage.

Nurses can manage limited specialties but lack consultations.manage, so
hide Start/stage/chart edits that 403 while keeping queue/vitals/billing
aligned with what those routes actually authorize.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Http/Controllers/Care/EmergencyWorkspaceController.php

@@ -77,7 +77,13 @@ class EmergencyWorkspaceController extends Controller
         SpecialtyModuleService $modules,
         EmergencyVitalsService $vitals,
     ): RedirectResponse {
-        $this->authorizeAbility($request, 'consultations.manage');
+        $permissions = app(\App\Services\Care\CarePermissions::class);
+        $member = $this->member($request);
+        abort_unless(
+            $permissions->can($member, 'vitals.manage')
+            || $permissions->can($member, 'consultations.manage'),
+            403,
+        );
         $this->assertEmergencyManage($request, $modules);
         $this->assertVisit($request, $visit);