feat(admin): 更新后台权限管理与同步逻辑，简化权限检查并优化文档

- 新增后台 RBAC 相关文档，提供权限目录与维护命令说明。
- 移除不必要的角色资源同步检查，简化权限审计命令。
- 更新权限描述与同步逻辑，确保一致性与可维护性。
- 统一权限注册表，替换过时的权限别名，增强代码可读性。

database/seeders/AdminRbacAndUserSeeder.php

@@ -5,7 +5,6 @@ namespace Database\Seeders;
 use App\Models\AdminRole;
 use App\Models\AdminUser;
 use Illuminate\Database\Seeder;
-use Illuminate\Support\Facades\DB;
 use App\Support\AdminPermissionBridge;
 
 /**
@@ -16,27 +15,9 @@ use App\Support\AdminPermissionBridge;
 final class AdminRbacAndUserSeeder extends Seeder
 {
     /** @param  list<string>  $legacySlugs */
-    private function syncRoleMenuActions(AdminRole $role, array $legacySlugs): void
+    private function syncRolePermissions(AdminRole $role, array $legacySlugs): void
     {
-        $codes = [];
-        foreach ($legacySlugs as $slug) {
-            $codes = array_merge($codes, AdminPermissionBridge::menuActionCodesForLegacy($slug));
-        }
-        $codes = array_values(array_unique($codes));
-
-        $ids = DB::table('admin_menu_actions')
-            ->whereIn('permission_code', $codes)
-            ->where('status', 1)
-            ->pluck('id')
-            ->all();
-
-        DB::table('admin_role_menu_actions')->where('role_id', $role->id)->delete();
-        foreach ($ids as $mid) {
-            DB::table('admin_role_menu_actions')->insert([
-                'role_id' => $role->id,
-                'menu_action_id' => (int) $mid,
-            ]);
-        }
+        $role->syncLegacyPermissionSlugs($legacySlugs);
     }
 
     /** @return list<string> */
@@ -51,13 +32,13 @@ final class AdminRbacAndUserSeeder extends Seeder
             ['slug' => AdminUser::ROLE_SUPER_ADMIN],
             ['name' => '超级管理员'],
         );
-        $this->syncRoleMenuActions($super, $this->allCatalogSlugs());
+        $this->syncRolePermissions($super, $this->allCatalogSlugs());
 
         $risk = AdminRole::query()->updateOrCreate(
             ['slug' => 'risk_operator'],
             ['name' => '风控运营员'],
         );
-        $this->syncRoleMenuActions($risk, [
+        $this->syncRolePermissions($risk, [
             'prd.play_switch.manage',
             'prd.odds.manage',
             'prd.risk_cap.manage',
@@ -66,15 +47,16 @@ final class AdminRbacAndUserSeeder extends Seeder
             'prd.draw_result.manage',
             'prd.payout.review',
             'prd.wallet_reconcile.view',
-            'prd.audit.self',
+            'prd.audit.view',
             'prd.player_freeze.manage',
+            'prd.report.view',
         ]);
 
         $finance = AdminRole::query()->updateOrCreate(
             ['slug' => 'finance'],
             ['name' => '财务/对账员'],
         );
-        $this->syncRoleMenuActions($finance, [
+        $this->syncRolePermissions($finance, [
             'prd.users.view_finance',
             'prd.risk_cap.view',
             'prd.rebate.view',
@@ -83,17 +65,19 @@ final class AdminRbacAndUserSeeder extends Seeder
             'prd.payout.view',
             'prd.wallet_reconcile.manage',
             'prd.wallet_adjust.manage',
-            'prd.audit.finance',
+            'prd.audit.view',
+            'prd.report.view',
         ]);
 
         $cs = AdminRole::query()->updateOrCreate(
             ['slug' => 'customer_service'],
             ['name' => '客服人员'],
         );
-        $this->syncRoleMenuActions($cs, [
+        $this->syncRolePermissions($cs, [
             'prd.users.view_cs',
             'prd.draw_result.view',
             'prd.wallet_reconcile.view_cs',
+            'prd.report.view',
         ]);
 
         $username = 'admin';