refactor：拆分 API 路由与请求校验，统一 final 类和代码风格

app/Http/Requests/Admin/AdminUserPermissionSyncRequest.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 管理员用户权限同步请求。
+ *
+ * @see AdminUserPermissionSyncController
+ */
+final class AdminUserPermissionSyncRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'permissions' => ['required', 'array'],
+            'permissions.*' => ['string', 'max:128'],
+        ];
+    }
+}