feat: 管理端 RBAC 权限体系与员工管理

新增多角色权限控制（赛事/财务/客服管理员），支持员工 CRUD、路由菜单按权限显隐、审计日志范围过滤；登录返回角色与权限列表。玩家端赛事列表增加静默刷新避免图片闪烁。Seed 补充演示员工账号与充值相关权限。附带 RBAC/审计范围单元测试及 UAT 文档更新。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin/src/views/Contents.vue

@@ -3,6 +3,8 @@ import { ref, computed, watch } from 'vue';
 import { ElMessage, ElMessageBox } from 'element-plus';
 import type { TableInstance } from 'element-plus';
 import { useAdminLocale } from '../composables/useAdminLocale';
+import { usePermissions } from '../composables/usePermissions';
+import { AdminPerm } from '../constants/permissions';
 import api from '../api';
 import AdminTableEmpty from '../components/AdminTableEmpty.vue';
 import {
@@ -11,6 +13,8 @@ import {
 } from './match-form';
 
 const { t, localeTag } = useAdminLocale();
+const { hasPermission } = usePermissions();
+const canManageContent = computed(() => hasPermission(AdminPerm.content));
 
 /* ── Image upload helpers ── */
 const IMAGE_ACCEPT = 'image/png,image/jpeg,image/webp,image/gif,image/svg+xml';
@@ -470,9 +474,10 @@ void load();
         </el-form-item>
         <el-form-item>
           <el-button type="primary" size="small" @click="load">{{ t('common.search') }}</el-button>
-          <el-button type="primary" plain size="small" @click="openCreate">
+          <el-button v-if="canManageContent" type="primary" plain size="small" @click="openCreate">
             {{ t('content.btn.create') }}
           </el-button>
+          <template v-if="canManageContent">
           <span v-if="hasSelection" class="batch-hint">
             {{ t('content.batch.selected', { n: selectedRows.length }) }}
           </span>
@@ -499,6 +504,7 @@ void load();
           >
             {{ t('content.batch.delete') }}
           </el-button>
+          </template>
         </el-form-item>
       </el-form>
     </el-card>