feat(analytics): wire Province and Sector filters on Skills Analytics dashboard

[wilfredeveloper]

Jira

https://tabiya-tech.atlassian.net/browse/CORE-355

Summary

• Province and Sector dropdowns in the SkillsAnalytics component were inert placeholders (value="", no onChange, no options). This PR wires them end-to-end.
• Both filters now trigger API refetches with the correct query params, and the backend scopes aggregations to the matching student population.
• Province filter is admin-only (ignored for institution staff who are already scoped by JWT).
• Sector filter works for all roles, using in-memory TEVETA data to map hub sector names (Agriculture, Energy, Hospitality, Mining, Water) → programme names → PLAIN_PERSONAL_DATA.data.programme_name.

Changes

Frontend (admin-frontend/)

• moduleFilterOptions.ts — adds MODULE_FILTER_SECTORS (5 TEVETA sectors)
• SkillsAnalytics.tsx — adds province/sector state; populates and wires both dropdowns
• useSkillGapStats / useSkillsSupplyStats — accept province and sector; added to useEffect dep array
• AnalyticsService.ts — appends province and sector to URL params for both endpoints

Backend (backend/)

• analytics/user_filter.py (new) — shared helpers: resolve_user_ids_for_institution, resolve_user_ids_for_province, resolve_user_ids_for_sector, intersect_user_id_sets
• analytics/skill_gap/routes.py — adds province and sector Query params; intersection logic
• analytics/skills_supply/routes.py — same

Tooling

• scripts/seed_analytics_test_data.py (new) — seeds 6 test users for manual filter verification

Test plan

Automated

# Backend
cd backend
poetry run pytest -k "skill_gap or skills_supply" -v

# Frontend type-check
cd admin-frontend
yarn compile

Manual (on dev with the seed script)

Seed test data:

cd backend
poetry run python scripts/seed_analytics_test_data.py

This seeds 6 users across all 5 sectors and 4 provinces. Expected results:

Filter	Expected users / behaviour
No filters	All 6 users visible in both charts
Province = Lusaka	Students from Lusaka only
Province = Copperbelt	Students from Copperbelt only
Sector = Agriculture	Students enrolled in Agriculture-priority programmes
Sector = Energy	Students enrolled in Energy-priority programmes
Sector = Hospitality	Students enrolled in Tourism-priority programmes
Province = Copperbelt + Sector = Agriculture	Intersection — 1 user
Province = Lusaka + Sector = Mining	No overlap — empty state shown

Cleanup when done:

poetry run python scripts/seed_analytics_test_data.py --cleanup

Edge cases verified

• Empty intersection (province + sector with no shared users) → charts show the existing "coming soon" empty state, no crash
• Institution staff role: province param is silently ignored by backend; sector filter still applies on top of institution scope

[rav3n11]

@wilfredeveloper there are conflicts that need to be resolved before we can merge this, please rebase this branch on main?