Hide peer logins on profiles and restrict view_all to published reports.

Login stays visible only to self/manager/HR; draft report docs stay department-head only.

Co-authored-by: Cursor <cursoragent@cursor.com>

core/tests.py

@@ -146,6 +146,7 @@ class EmployeeDetailTests(TestCase):
         self.assertNotIn('Личный телефон', html)
         self.assertNotIn('Интеграции', html)
         self.assertNotIn(self.employee.personal_phone, html)
+        self.assertNotIn(self.employee.username, html)
 
     def test_manager_chain_and_subordinates_shown(self):
         login_2fa(self.client, self.staff)