feat(client): show linked employee display names and modal-based permission editing

- shared getUserDisplayName helper (name with employee first/last fallback)
- display names/avatars across sidebar nav, dashboard, user menu, org chart
  nodes, user search, cv lifecycle and bank detail
- permission selector rework: per-group modal flow, drop separate search select