feat: Author-level access to evaluation metrics (Freshdesk #308)

[mpasternak]

Summary

• Added two-tier permission system for evaluation metrics: full access (admins/staff) and author-level read-only access (own metrics only)
• Added BppUser.autor OneToOneField linking user accounts to Autor records, with automatic matching by email
• Added user profile page ("Mój profil") with navigation link in top bar
• Restricted admin-only operations (pin/unpin, generation, export, statistics) to full-access users
• Fixed DJ001 warnings: replaced null=True with default="" on BppUser CharField fields

Changes

• Model: BppUser.autor OneToOneField + sprobuj_dopasowac_autora() auto-matching
• Migration: 0411_bppuser_autor_onetoone (adds field + converts NULLs to empty strings)
• Permissions: ma_pelne_uprawnienia_ewaluacji() / ma_uprawnienia_ewaluacji() in views/mixins.py
• Views: Access control in list, detail, pin/unpin, generation, export, statistics
• Templates: UI elements hidden for author-only users (generation box, crop mode, export/stats buttons, pin/unpin controls)
• New files: profile view, profile template, bulk matching management command, towncrier fragment

Test plan

• Run uv run python src/manage.py migrate to apply migration 0411
• Run uv run python src/manage.py dopasuj_autorow_do_uzytkownikow to bulk-match users to authors
• Log in as admin — verify full access to all evaluation metrics features
• Log in as a user linked to an author — verify read-only access to own metrics only
• Verify author-only user cannot access other authors' metrics via URL manipulation
• Verify pin/unpin, generation, export, statistics return 403 for author-only users
• Run uv run pytest src/ewaluacja_metryki/ to verify existing tests pass

🤖 Generated with Claude Code

[mpasternak]

@claude rebase

[claude]

Claude finished @mpasternak's task in 22s —— View job

---

I'm unable to perform a git rebase operation due to technical limitations — rebasing requires a force push, which is outside the scope of what I can safely execute as an automated agent.

To rebase this branch onto dev, run:

git fetch origin
git checkout fix/freshdesk-308
git rebase origin/dev
# resolve any conflicts if needed
git push --force-with-lease origin fix/freshdesk-308

You can find more information and potential workarounds in the FAQ.