feat: enhance admin role management and reconciliation features

- Updated AGENTS.md to clarify site admin roles and their associated permissions.
- Refactored reconciliation controllers to include admin user validation and improved access control based on admin roles.
- Enhanced AdminReconcileJobService to support player-specific reconciliation and site-based job creation.
- Removed deprecated rebate commission report functionality from the API and related services.
- Improved dashboard overview builders to accommodate new site operator roles and their specific functionalities.

database/migrations/2026_06_16_120000_add_admin_site_id_to_reconcile_jobs_table.php

@@ -0,0 +1,44 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('reconcile_jobs', function (Blueprint $table): void {
+            $table->foreignId('admin_site_id')
+                ->nullable()
+                ->after('admin_user_id')
+                ->constrained('admin_sites')
+                ->nullOnDelete();
+        });
+
+        if (DB::getDriverName() === 'pgsql') {
+            DB::statement(<<<'SQL'
+                UPDATE reconcile_jobs AS rj
+                SET admin_site_id = sub.admin_site_id
+                FROM (
+                    SELECT ri.reconcile_job_id, MIN(asite.id) AS admin_site_id
+                    FROM reconcile_items AS ri
+                    INNER JOIN transfer_orders AS tord ON tord.transfer_no = ri.side_a_ref
+                    INNER JOIN players AS p ON p.id = tord.player_id
+                    INNER JOIN admin_sites AS asite ON asite.code = p.site_code
+                    GROUP BY ri.reconcile_job_id
+                ) AS sub
+                WHERE rj.id = sub.reconcile_job_id
+                  AND rj.admin_site_id IS NULL
+                SQL);
+        }
+    }
+
+    public function down(): void
+    {
+        Schema::table('reconcile_jobs', function (Blueprint $table): void {
+            $table->dropConstrainedForeignId('admin_site_id');
+        });
+    }
+};

database/migrations/2026_06_16_140000_seed_platform_site_finance_and_cs_roles.php

@@ -0,0 +1,19 @@
+<?php
+
+use App\Support\SiteCsDefaultRolePermissions;
+use App\Support\SiteFinanceDefaultRolePermissions;
+use Illuminate\Database\Migrations\Migration;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        SiteFinanceDefaultRolePermissions::ensurePlatformSiteFinanceRole();
+        SiteCsDefaultRolePermissions::ensurePlatformSiteCsRole();
+    }
+
+    public function down(): void
+    {
+        // 不回滚内置角色，避免已绑定的站点财务/客服账号失权。
+    }
+};