fix: resolve permission fallback bug, remove debug code, and cleanup duplication

Logic Errors
------------
- Sidebar: fix permissions fallback so a user with no permissions gets
  zero access instead of falling back to the full nav list
  (user?.permissions ?? [] instead of ?? navSections.flatMap(...))
- carMaintanance.service / UseCarsMaintanance: add pagination to the
  maintenance records fetch instead of loading the entire list at once
- api.ts: redact sensitive fields (password, token) before logging the
  request body in console.debug, to avoid leaking credentials/PII

Code Flow Problems
-------------------
- OrderFormModal: remove leftover console.log/debug statements and the
  redundant onClick handler on the submit button
- auth: remove the unused src/service/auth.service.ts (axios) and keep
  only src/services/auth.service.ts (fetch); fix useAuth.ts import path
  from

src/Components/Trip_Report/Tripreportpanel.tsx

@@ -1,8 +1,7 @@
 "use client";
 
 import { useRef, useState } from "react";
-import { Spinner } from "../UI";
-import { Toast } from "../UI/Toast";
+import { Spinner ,Toast} from "../UI";
 import { tripService } from "@/src/services/trip.service";
 import { getStoredToken } from "@/src/lib/auth";
 import type { TripNotification } from "@/src/hooks/useTrip";
@@ -11,7 +10,6 @@ interface TripReportPanelProps {
   tripId: string;
 }
 
-// Extracts a readable message from any error shape the API might return.
 function extractApiMessage(err: unknown, fallback: string): string {
   if (err && typeof err === "object") {
     const e = err as Record<string, unknown>;
@@ -40,15 +38,14 @@ export function TripReportPanel({ tripId }: TripReportPanelProps) {
     setLoading(true);
     try {
       const token = getStoredToken();
-      const res   = await tripService.getReport(tripId, token);
-      const url   = (res as unknown as { data: { reportUrl: string } }).data?.reportUrl;
+      const { reportUrl } = await tripService.getReport(tripId, token);
 
-      if (!url) {
+      if (!reportUrl) {
         notify({ type: "error", message: "لم يتم إرجاع رابط التقرير من الخادم." });
         return;
       }
 
-      window.open(url, "_blank", "noopener,noreferrer");
+      window.open(reportUrl, "_blank", "noopener,noreferrer");
       notify({ type: "success", message: "تم إنشاء التقرير بنجاح." });
     } catch (err) {
       notify({ type: "error", message: extractApiMessage(err, "تعذّر إنشاء التقرير.") });
@@ -107,7 +104,6 @@ export function TripReportPanel({ tripId }: TripReportPanelProps) {
         </button>
       </div>
 
-      {/* Toast scoped to this panel — sits at the bottom of the screen */}
       <Toast
         notification={notification}
         onDismiss={() => {