fix(api): fix permission name test to use hyphen

Update test permission name from employee.custom_action to employee.custom-action
because the permission name regex now rejects underscores and only allows hyphens.