feat: 增强管理员权限管理，添加 RBAC 支持，更新 AdminUser 模型以处理角色和权限，更新登录接口返回权限信息，扩展数据库填充器以同步角色权限

app/Models/AdminUser.php

@@ -2,6 +2,7 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Relations\BelongsToMany;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
 use Laravel\Sanctum\HasApiTokens;
@@ -11,6 +12,8 @@ class AdminUser extends Authenticatable
     use HasApiTokens;
     use Notifiable;
 
+    public const ROLE_SUPER_ADMIN = 'super_admin';
+
     protected $table = 'admin_users';
 
     protected $fillable = [
@@ -34,4 +37,54 @@ class AdminUser extends Authenticatable
             'password' => 'hashed',
         ];
     }
+
+    /** @return BelongsToMany<AdminRole, AdminUser> */
+    public function roles(): BelongsToMany
+    {
+        return $this->belongsToMany(
+            AdminRole::class,
+            'admin_user_roles',
+            'admin_user_id',
+            'role_id',
+        );
+    }
+
+    /** 是否具备指定权限（含 `super_admin` 角色全放行）。 */
+    public function hasAdminPermission(string $slug): bool
+    {
+        $this->loadMissing(['roles.permissions']);
+
+        foreach ($this->roles as $role) {
+            if ($role->slug === self::ROLE_SUPER_ADMIN) {
+                return true;
+            }
+            foreach ($role->permissions as $permission) {
+                if ($permission->slug === $slug) {
+                    return true;
+                }
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * @return list<string>
+     */
+    public function adminPermissionSlugs(): array
+    {
+        $this->loadMissing(['roles.permissions']);
+        if ($this->roles->contains('slug', self::ROLE_SUPER_ADMIN)) {
+            return AdminPermission::query()->orderBy('slug')->pluck('slug')->all();
+        }
+
+        $out = [];
+        foreach ($this->roles as $role) {
+            foreach ($role->permissions as $permission) {
+                $out[$permission->slug] = true;
+            }
+        }
+
+        return array_keys($out);
+    }
 }