- Fix has_group() security violations by using request.env.user.has_group() in controllers
- Add mail.compose.message ACL permissions for portal users to enable injury creation
- Fix foreign key constraint violation in treatment note creation by passing correct patient parameter
- Update portal field labels and values to match internal views (match_status, practice_status, stage)
- Change "Medical Notes" to "Team Notes" and convert from HTML to plain text rendering
- Fix allergies field clearing logic to allow empty string updates
- Improve badge text readability with proper color contrast across all portal views
- Remove redundant external link icons from injury count displays
Resolves portal injury creation 403 errors and ensures consistent terminology
between portal and backend interfaces.
