feat: 增强代理和玩家管理功能

- 在多个控制器中更新权限检查逻辑，确保管理员能够更灵活地管理代理和玩家。
- 在 AdminPlayerStoreController 中引入对玩家创建能力的验证，确保只有具备相应权限的管理员能够创建玩家。
- 更新请求验证逻辑，新增 credit_limit、rebate_rate 和 extra_rebate_rate 字段，以支持更细粒度的玩家管理。
- 在 AgentNodeProfileController 中添加对父代理能力授予的验证，确保子代理的权限在父代理范围内。
- 引入 AgentProfileFieldRules 以简化代理资料更新请求的规则定义，提升代码复用性。

tests/Feature/AdminUserPermissionApiTest.php

@@ -120,6 +120,7 @@ test('admin can sync user roles for default site', function (): void {
 
     $this->withHeader('Authorization', 'Bearer '.$token)
         ->putJson('/api/v1/admin/admin-users/'.$target->id.'/roles', [
+            'admin_site_id' => AdminUser::defaultAdminSiteId(),
             'role_slugs' => ['role_sync_b', 'role_sync_a'],
         ])
         ->assertOk()
@@ -247,7 +248,6 @@ test('permission catalog groups permissions by admin navigation order', function
         'rules_odds',
         'jackpot',
         'risk_cap',
-        'integration',
         'currencies',
         'admin_users',
         'admin_roles',
@@ -257,12 +257,12 @@ test('permission catalog groups permissions by admin navigation order', function
     ]);
     expect($groups[1]['key'])->toBe('agents');
     expect($groups[2]['key'])->toBe('draws');
-    expect($groups[15]['label'])->toBe('管理列表');
-    expect(array_column($groups[15]['permissions'], 'slug'))->toBe(['prd.admin_user.manage']);
-    expect($groups[16]['label'])->toBe('角色管理');
-    expect(array_column($groups[16]['permissions'], 'slug'))->toBe(['prd.admin_role.manage']);
 
     $groupsByKey = collect($groups)->keyBy('key');
+    expect($groupsByKey['admin_users']['label'])->toBe('管理列表');
+    expect(array_column($groupsByKey['admin_users']['permissions'], 'slug'))->toBe(['prd.admin_user.manage']);
+    expect($groupsByKey['admin_roles']['label'])->toBe('角色管理');
+    expect(array_column($groupsByKey['admin_roles']['permissions'], 'slug'))->toBe(['prd.admin_role.manage']);
     expect(array_column($groupsByKey['tickets']['permissions'], 'slug'))->toBe([
         'prd.tickets.view',
     ]);
@@ -280,7 +280,7 @@ test('permission catalog groups permissions by admin navigation order', function
     ]);
 });
 
-test('admin can repair role permissions from the full catalog after role creation', function (): void {
+test('admin can adjust platform agent role permissions from the catalog', function (): void {
     $token = makeAdminWithPermissions('role_permission_repairer', ['prd.admin_user.manage', 'prd.admin_role.manage']);
 
     $catalog = $this->withHeader('Authorization', 'Bearer '.$token)
@@ -300,39 +300,37 @@ test('admin can repair role permissions from the full catalog after role creatio
         ->toContain('prd.report.view')
         ->toContain('prd.wallet_reconcile.manage');
 
-    $role = $this->withHeader('Authorization', 'Bearer '.$token)
-        ->postJson('/api/v1/admin/admin-roles', [
-            'slug' => 'repairable_role',
-            'name' => 'Repairable Role',
-            'permission_slugs' => [],
-        ])
+    $agentRole = collect($this->withHeader('Authorization', 'Bearer '.$token)
+        ->getJson('/api/v1/admin/admin-roles')
         ->assertOk()
-        ->assertJsonPath('data.permission_slugs', [])
-        ->json('data');
+        ->json('data.items'))
+        ->firstWhere('slug', 'agent');
+
+    expect($agentRole)->not->toBeNull();
 
     $repairResponse = $this->withHeader('Authorization', 'Bearer '.$token)
-        ->putJson('/api/v1/admin/admin-roles/'.$role['id'].'/permissions', [
+        ->putJson('/api/v1/admin/admin-roles/'.$agentRole['id'].'/permissions', [
             'permission_slugs' => ['prd.report.view', 'prd.wallet_reconcile.manage'],
         ])
         ->assertOk()
-        ->assertJsonPath('data.slug', 'repairable_role');
+        ->assertJsonPath('data.slug', 'agent');
 
     expect($repairResponse->json('data.permission_slugs'))
         ->toContain('prd.report.view', 'prd.wallet_reconcile.manage');
 
     $this->withHeader('Authorization', 'Bearer '.$token)
-        ->putJson('/api/v1/admin/admin-roles/'.$role['id'].'/permissions', [
+        ->putJson('/api/v1/admin/admin-roles/'.$agentRole['id'].'/permissions', [
             'permission_slugs' => ['prd.admin_role.manage'],
         ])
         ->assertOk()
         ->assertJsonPath('data.permission_slugs', ['prd.admin_role.manage']);
 
-    $persistedPermissions = $this->withHeader('Authorization', 'Bearer '.$token)
+    $persistedRole = collect($this->withHeader('Authorization', 'Bearer '.$token)
         ->getJson('/api/v1/admin/admin-roles')
         ->assertOk()
-        ->json('data.items');
+        ->json('data.items'))
+        ->firstWhere('slug', 'agent');
 
-    $persistedRole = collect($persistedPermissions)->firstWhere('slug', 'repairable_role');
     expect($persistedRole['permission_slugs'])->toBe(['prd.admin_role.manage']);
 });
 
@@ -348,6 +346,7 @@ test('admin can create update and delete users with crud rules', function (): vo
             'email' => 'newuser@example.com',
             'password' => 'secret-long',
             'status' => 0,
+            'admin_site_id' => AdminUser::defaultAdminSiteId(),
             'role_slugs' => ['crud_new_user_role'],
         ])
         ->assertOk()
@@ -364,6 +363,7 @@ test('admin can create update and delete users with crud rules', function (): vo
             'nickname' => 'dup',
             'email' => null,
             'password' => 'secret-long',
+            'admin_site_id' => AdminUser::defaultAdminSiteId(),
             'role_slugs' => [$crudRole->slug],
         ])
         ->assertStatus(422)
@@ -407,6 +407,7 @@ test('admin user create requires at least one role slug', function (): void {
             'nickname' => 'NR',
             'email' => null,
             'password' => 'secret-long',
+            'admin_site_id' => AdminUser::defaultAdminSiteId(),
             'role_slugs' => [],
         ])
         ->assertStatus(422)