feat: 增加角色管理与奖池配置迁移，优化管理端权限与样式

src/modules/draws/draw-finance-console.tsx

@@ -16,14 +16,23 @@ import {
   TableHeader,
   TableRow,
 } from "@/components/ui/table";
+import { adminHasAnyPermission } from "@/lib/admin-permissions";
 import { cn } from "@/lib/utils";
+import { useAdminProfile } from "@/stores/admin-session";
 import { LotteryApiBizError } from "@/types/api/errors";
 import type { AdminDrawFinanceSummaryData } from "@/types/api/admin-draw-finance";
 import { toast } from "sonner";
 
+import { PRD_PAYOUT_MANAGE, PRD_PAYOUT_REVIEW } from "./draw-prd";
+
 export function DrawFinanceConsole({ drawId }: { drawId: string }): React.ReactElement {
   const { t } = useTranslation(["draws", "common"]);
   const idNum = Number(drawId);
+  const profile = useAdminProfile();
+  const canRunSettlement = adminHasAnyPermission(profile?.permissions, [
+    PRD_PAYOUT_MANAGE,
+    PRD_PAYOUT_REVIEW,
+  ]);
   const [data, setData] = useState<AdminDrawFinanceSummaryData | null>(null);
   const [err, setErr] = useState<string | null>(null);
   const [loading, setLoading] = useState(true);
@@ -122,7 +131,12 @@ export function DrawFinanceConsole({ drawId }: { drawId: string }): React.ReactE
         <Button type="button" variant="secondary" size="sm" onClick={() => void load()}>
           {t("actions.refresh", { ns: "common" })}
         </Button>
-        <Button type="button" size="sm" disabled={settling} onClick={() => void runSettlement()}>
+        <Button
+          type="button"
+          size="sm"
+          disabled={!canRunSettlement || settling || data.draw_status !== "settling"}
+          onClick={() => void runSettlement()}
+        >
           {settling ? t("processing") : t("runSettlement")}
         </Button>
         <Link