manageComisiones cap referenced by createComision/updateComision/softDeleteComision but not granted to any role in lookupOptions — all comisión CRUD currently denied. Add to administrador + bedelia caps, or replace withCap('manageComisiones') with managePeriodos/manageRoster (WI#128 audit finding)