Fix sidebar navigator initial sync

[roncodes]

Summary

• simplify the sidebar navigator initial active-parent sync back to a one-time render check
• support permission-safe navigator filtering with visible permissions and required visible children
• fix FleetOps root-entry behavior by allowing modules to suppress initial nested sync from root URLs while preserving later route sync

Why

FleetOps can resolve the module root URL to a deeply nested route like console.fleet-ops.operations.orders.index.index. Exact route-name matching caused the sidebar to open the Operations nested menu on first module entry, which made the root sections harder to discover.

Verification

• git diff --cached --check
• pnpm exec ember test --filter "initial active parent predicate"