feat: Implement file management and authorization features

- Add RequiresPermissionAttribute for gRPC method access control.
- Create IFileManagementService interface for file upload and management.
- Implement AddProductImageCommand and handler for adding product images.
- Implement CreateNewProductsCommand and handler for creating new products with image uploads.
- Implement DeleteProductsCommand and handler for deleting products and their associations.
- Implement RemoveProductImageCommand and handler for removing product images from galleries.
- Implement UpdateProductsCommand and handler for updating product details and images.
- Create GetProductGalleryQuery and handler for retrieving product galleries.
- Implement PermissionService for role-based access control using JWT claims.
- Implement FileManagementService for handling file uploads and image optimization.
- Define gRPC service and messages for file management in fms.proto.
- Add FluentValidation for request validation in various commands.
- Create PermissionInterceptor for enforcing permissions on gRPC methods.

src/CMSMicroservice.WebApi/Services/UserWalletService.cs

@@ -8,16 +8,29 @@ using CMSMicroservice.Application.UserWalletCQ.Queries.GetAllUserWalletByFilter;
 using CMSMicroservice.Application.UserWalletCQ.Queries.GetCustomerWalletChangeLog;
 using CMSMicroservice.Application.UserWalletCQ.Queries.GetCustomerWithdrawals;
 using CMSMicroservice.Application.UserWalletCQ.Queries.GetCustomerWithdrawalSettings;
+using CMSMicroservice.Application.Common.Interfaces;
+using Grpc.Core;
+using Microsoft.EntityFrameworkCore;
+using System.Linq;
+
 namespace CMSMicroservice.WebApi.Services;
 public class UserWalletService : UserWalletContract.UserWalletContractBase
 {
     private readonly IDispatchRequestToCQRS _dispatchRequestToCQRS;
     private readonly ISender _sender;
+    private readonly IApplicationDbContext _context;
+    private readonly ICurrentUserService _currentUserService;
 
-    public UserWalletService(IDispatchRequestToCQRS dispatchRequestToCQRS, ISender sender)
+    public UserWalletService(
+        IDispatchRequestToCQRS dispatchRequestToCQRS, 
+        ISender sender,
+        IApplicationDbContext context,
+        ICurrentUserService currentUserService)
     {
         _dispatchRequestToCQRS = dispatchRequestToCQRS;
         _sender = sender;
+        _context = context;
+        _currentUserService = currentUserService;
     }
     public override async Task<CreateNewUserWalletResponse> CreateNewUserWallet(CreateNewUserWalletRequest request, ServerCallContext context)
     {
@@ -100,10 +113,38 @@ public class UserWalletService : UserWalletContract.UserWalletContractBase
     
     public override async Task<Google.Protobuf.WellKnownTypes.Empty> CustomerWithdrawBalance(CustomerWithdrawBalanceRequest request, ServerCallContext context)
     {
-        // Mock implementation - would handle withdrawal
+        var userId = GetCurrentUserId();
+        
+        // Find the commission payout record
+        var payout = await _context.UserCommissionPayouts
+            .Where(p => p.Id == request.PayoutId && p.UserId == userId && !p.IsDeleted)
+            .FirstOrDefaultAsync(context.CancellationToken);
+        
+        if (payout == null)
+            throw new RpcException(new Status(StatusCode.NotFound, "رکورد پرداخت کمیسیون یافت نشد"));
+        
+        // Validate status - can only withdraw if already paid to wallet
+        if (payout.Status != Domain.Enums.CommissionPayoutStatus.Paid)
+            throw new RpcException(new Status(StatusCode.FailedPrecondition, 
+                "فقط کمیسیون‌های واریز شده به کیف پول قابل برداشت هستند"));
+        
+        // Update payout with withdrawal info
+        payout.WithdrawalMethod = (Domain.Enums.WithdrawalMethod)request.WithdrawalMethod;
+        payout.IbanNumber = request.IbanNumber;
+        payout.Status = Domain.Enums.CommissionPayoutStatus.WithdrawRequested;
+        
+        await _context.SaveChangesAsync(context.CancellationToken);
+        
         return new Google.Protobuf.WellKnownTypes.Empty();
     }
     
+    private long GetCurrentUserId()
+    {
+        if (long.TryParse(_currentUserService.UserId, out var userId) && userId > 0)
+            return userId;
+        throw new RpcException(new Status(StatusCode.Unauthenticated, "لطفاً وارد حساب کاربری خود شوید"));
+    }
+    
     public override async Task<GetCustomerWithdrawalsResponse> GetCustomerWithdrawals(GetCustomerWithdrawalsRequest request, ServerCallContext context)
     {
         var query = new GetCustomerWithdrawalsQuery