feat: 管理端 RBAC 权限体系与员工管理

新增多角色权限控制（赛事/财务/客服管理员），支持员工 CRUD、路由菜单按权限显隐、审计日志范围过滤；登录返回角色与权限列表。玩家端赛事列表增加静默刷新避免图片闪烁。Seed 补充演示员工账号与充值相关权限。附带 RBAC/审计范围单元测试及 UAT 文档更新。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin/src/constants/permissions.ts

@@ -0,0 +1,24 @@
+/** 与 API seed / admin-permissions 一致 */
+export const AdminPerm = {
+  reports: 'reports.view',
+  usersView: 'users.view',
+  usersCreate: 'users.create',
+  usersResetPassword: 'users.reset_password',
+  settings: 'settings.manage',
+  agentsView: 'agents.view',
+  agentsCreate: 'agents.create',
+  agentsCredit: 'agents.credit',
+  walletDeposit: 'wallet.deposit',
+  walletWithdraw: 'wallet.withdraw',
+  matches: 'matches.manage',
+  settlement: 'settlement.confirm',
+  resettle: 'settlement.resettle',
+  bets: 'bets.view',
+  cashback: 'cashback.confirm',
+  content: 'content.manage',
+  audit: 'audit.view',
+  depositManage: 'deposit.manage',
+  depositReview: 'deposit.review',
+} as const;
+
+export type AdminPermission = (typeof AdminPerm)[keyof typeof AdminPerm];