feat: Gemini AI (doc OCR + face match) + role-assignment endpoints

- GeminiService (integrations/gemini, @Global): extractDocument (OCR fields) + faceMatch; graceful if no GEMINI_API_KEY
- documents: face-match now real via Gemini; POST /admin/documents/:id/ocr extracts fields for CS auto-fill
- roles: PATCH /admin/users/:id/role (admin) + POST /platform/users/role (bootstrap via x-platform-secret)
- config: gemini + platform.secret; .env.example entries

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

apps/driver/lib/controller/local/phone_intel/helpers.dart

@@ -0,0 +1,31 @@
+import 'countries.dart';
+
+bool isNumeric(String s) =>
+    s.isNotEmpty && int.tryParse(s.replaceAll("+", "")) != null;
+
+String removeDiacritics(String str) {
+  var withDia =
+      'ÀÁÂÃÄÅàáâãäåÒÓÔÕÕÖØòóôõöøÈÉÊËèéêëðÇçÐÌÍÎÏìíîïÙÚÛÜùúûüÑñŠšŸÿýŽž';
+  var withoutDia =
+      'AAAAAAaaaaaaOOOOOOOooooooEEEEeeeeeCcDIIIIiiiiUUUUuuuuNnSsYyyZz';
+
+  for (int i = 0; i < withDia.length; i++) {
+    str = str.replaceAll(withDia[i], withoutDia[i]);
+  }
+
+  return str;
+}
+
+extension CountryExtensions on List<Country> {
+  List<Country> stringSearch(String search) {
+    search = removeDiacritics(search.toLowerCase());
+    return where(
+      (country) => isNumeric(search) || search.startsWith("+")
+          ? country.dialCode.contains(search)
+          : removeDiacritics(country.name.replaceAll("+", "").toLowerCase())
+                  .contains(search) ||
+              country.nameTranslations.values.any((element) =>
+                  removeDiacritics(element.toLowerCase()).contains(search)),
+    ).toList();
+  }
+}