feat: add employee-only supervisor role nominated by crm selection 1487

tests/Security/RoleTest.php

@@ -44,6 +44,15 @@ class RoleTest extends TestCase
         self::assertSame([Role::EMPLOYEE, Role::CUSTOMER_EXPERT], $roles);
     }
 
+    public function testSupervisorClaimOnlyProducesANomination(): void
+    {
+        $roles = Role::sync([], [Role::EMPLOYEE, Role::SUPERVISOR]);
+
+        self::assertSame([Role::EMPLOYEE, Role::pending(Role::SUPERVISOR)], $roles);
+        self::assertSame([Role::SUPERVISOR => 'Leitung'], Role::nominatedFrom($roles));
+        self::assertSame([Role::EMPLOYEE, Role::SUPERVISOR], Role::approve($roles, Role::SUPERVISOR));
+    }
+
     public function testApprovedRoleSurvivesTheNextSyncAndIsNotMarkedAgain(): void
     {
         $roles = Role::sync([Role::TEAMER, Role::HOUSE_MANAGER], [Role::HOUSE_MANAGER, Role::TEAMER]);