后台新增RBAC权限模型支持按角色配置接单管理权限

- 新增 admin_roles/admin_permissions/admin_role_permissions 三表与种子数据(059迁移)
- 接单平台全部管理路由从固定角色切换为细粒度权限校验
- 撤单按动作二次校验:退回大厅与取消订单分别要求对应权限
- 管理员账号页新增角色权限配置卡片(admin专属,带审计日志)
- 权限更新走事务保证原子性;session实时解析权限确保修改立即生效

apps/backend/src/routes/admin.ts

@@ -10,6 +10,7 @@ import kuaishouIndustryRouter from './admin/kuaishou-industry.js'
 import ordersRouter from './admin/orders.js'
 import notificationsRouter from './admin/notifications.js'
 import realtimeRouter from './admin/realtime.js'
+import rbacRouter from './admin/rbac.js'
 import platformConfigRouter from './admin/platform-config.js'
 import { requireAdminSession } from './admin/session.js'
 import tasksRouter from './admin/tasks.js'
@@ -24,6 +25,7 @@ router.use(requireAdminSession)
 router.use(filesRouter)
 router.use(dashboardRouter)
 router.use(usersRouter)
+router.use(rbacRouter)
 router.use(auditLogsRouter)
 router.use(platformConfigRouter)
 router.use(kuaishouIndustryRouter)