feat: 接入运维真实数据与三角色权限链路

- 新增 model_deploy 与 model_operations 双库查询，支持模型列表、模型详情、单月监控结果和运维工作台真实接口。

- 关闭运维模块生产 Mock 数据，补充缺表/空数据降级、工作台空状态和首条纵向链路测试。

- 按业务团队、模型团队、管理员权限矩阵接入菜单、页面、操作按钮和后端接口权限校验，支持 business_team 角色。

- 更新工作台布局、深色欢迎卡片、全宽页面适配、顶部回退，以及权限分组展示。

- 新增架构实现基线、周目标完成情况和角色权限矩阵初始化 SQL 文档。

frontend/app/services/api/_shared.ts

@@ -1,16 +1,3 @@
-export type DemoUser = {
-  userId: string;
-  userName: string;
-  username: string;
-  roleCode: "admin" | "developer";
-  roleName: string;
-};
-
-export type DemoWorkspace = {
-  workspaceId: string;
-  workspaceName: string;
-};
-
 export function createUuid(): string {
   const cryptoApi = globalThis.crypto;
   if (typeof cryptoApi?.randomUUID === "function") {
@@ -40,58 +27,6 @@ export function createUuid(): string {
   ].join("-");
 }
 
-export const demoUsers: DemoUser[] = [
-  { userId: "0000000000RF6FG1SDBXG59S13", userName: "张三", username: "admin-zhang", roleCode: "admin", roleName: "管理员" },
-  { userId: "0000000000H2QYCGPCWQM1JSGS", userName: "李四", username: "admin-li", roleCode: "admin", roleName: "管理员" },
-  { userId: "0000000000RWG40ESZPGJT629J", userName: "王五", username: "dev-wang", roleCode: "developer", roleName: "开发人员" },
-  { userId: "00000000004CQV7WASJA6N6FW4", userName: "赵六", username: "dev-zhao", roleCode: "developer", roleName: "开发人员" },
-];
-
-export const demoWorkspaces: DemoWorkspace[] = [
-  { workspaceId: "00000000000BM630VT9ARVFZPC", workspaceName: "模型开发 Workspace" },
-  { workspaceId: "0000000000AE0NC0V5T424KK86", workspaceName: "风险验证 Workspace" },
-];
-
-function readStoredContext(): Partial<{
-  userId: string;
-  workspaceId: string;
-}> {
-  if (typeof window === "undefined") return {};
-  try {
-    return JSON.parse(
-      window.localStorage.getItem("model-platform-demo-context") ?? "{}",
-    ) as Partial<{ userId: string; workspaceId: string }>;
-  } catch {
-    return {};
-  }
-}
-
-const storedContext = readStoredContext();
-const initialUser = demoUsers.find((item) => item.userId === storedContext.userId)
-  ?? demoUsers[0];
-const initialWorkspace = demoWorkspaces.find(
-  (item) => item.workspaceId === storedContext.workspaceId,
-) ?? demoWorkspaces[0];
-
-export const demoContext = {
-  ...initialUser,
-  ...initialWorkspace,
-};
-
-export function setDemoContext(input: {
-  user?: DemoUser;
-  workspace?: DemoWorkspace;
-}): void {
-  if (input.user) Object.assign(demoContext, input.user);
-  if (input.workspace) Object.assign(demoContext, input.workspace);
-  if (typeof window !== "undefined") {
-    window.localStorage.setItem("model-platform-demo-context", JSON.stringify({
-      userId: demoContext.userId,
-      workspaceId: demoContext.workspaceId,
-    }));
-  }
-}
-
 // API client for the platform backend.
 //
 // All endpoints that take a workspace context require the caller to
@@ -111,7 +46,7 @@ export type Employee = {
   display_name: string;
   email: string | null;
   status: "active" | "disabled" | "locked";
-  role_code: "admin" | "developer";
+  role_code: string;
   role_name: string;
   created_at: string;
 };

frontend/app/services/api/boundApi.ts

@@ -245,7 +245,7 @@ export type WorkspaceBoundApi = {
       display_name: string;
       email?: string | undefined;
       password: string;
-      role_code?: "admin" | "developer";
+      role_code?: string;
     },
   ) => Promise<Employee>;
   updateEmployee: (
@@ -257,7 +257,7 @@ export type WorkspaceBoundApi = {
     input: {
       display_name?: string;
       email?: string | null;
-      role_code?: "admin" | "developer";
+      role_code?: string;
       status?: "active" | "disabled" | "locked";
     },
   ) => Promise<Employee>;

frontend/app/services/api/platformEmployees.ts

@@ -25,7 +25,7 @@ export async function createPlatformEmployee(
     display_name: string;
     email?: string | undefined;
     password: string;
-    role_code?: "admin" | "developer";
+    role_code?: string;
   },
 ): Promise<Employee> {
   return apiRequest<Employee>(
@@ -39,7 +39,7 @@ export async function updatePlatformEmployee(
   input: {
     display_name?: string;
     email?: string | null;
-    role_code?: "admin" | "developer";
+    role_code?: string;
     status?: "active" | "disabled" | "locked";
   },
 ): Promise<Employee> {