feat(collaboration): 完善在线文档协作与通知闭环

- 新增协作文件夹、文件、不可变修订、成员、会话、回调回执、编辑申请与分享链接数据模型。

- 补齐新建、导入、复制、下载、回收站、恢复、成员授权、所有权转让及文件级权限接口。

- 接入 ONLYOFFICE 共同编辑、历史版本预览与恢复、修订另存副本、导出下载审计和幂等回调保存。

- 增加编辑权限申请、审批通知、项目提醒聚合、通知 Feed、已读处理及历史待办数据回填。

- 支持公开分享的查看或编辑模式、有效期、密码哈希、失败锁定、短时访问凭证与固定分享地址。

- 增加协作者导出、申请编辑、工作表结构保护和所有权管理策略，并纳入项目接口权限矩阵。

- 新增协作文件库、编辑工作区、公开分享页、下载与另存为对话框，以及导航、路由和权限入口。

- 统一网页端与桌面端通知布局，增加沉浸式工作区和浏览器、Tauri 双端全屏能力。

- 扩展运行时文件下载适配、Tauri 环境识别和原生全屏命令，继续保持业务代码运行时边界。

- 加固 ONLYOFFICE 消息桥的同源下载、签名地址隔离和保存为能力校验，并更新桌面发布检查。

- 增加连续数据库迁移、50MB 上传限制、OnlyOffice 中文文案与开发启动路由校验。

- 补充协作、通知、权限、路由、运行时、布局和 OnlyOffice 相关测试及模块说明文档。

frontend/src/router/index.ts

@@ -47,6 +47,9 @@ import KnowledgeMedicalConsult from "../views/ia/KnowledgeMedicalConsult.vue";
 import Precautions from "../views/ia/Precautions.vue";
 import KnowledgeSupportFiles from "../views/ia/KnowledgeSupportFiles.vue";
 import KnowledgeInstructionFiles from "../views/ia/KnowledgeInstructionFiles.vue";
+import CollaborationLibrary from "../views/knowledge/CollaborationLibrary.vue";
+import CollaborationWorkspace from "../views/knowledge/CollaborationWorkspace.vue";
+import CollaborationShareWorkspace from "../views/knowledge/CollaborationShareWorkspace.vue";
 import FeasibilityForm from "../views/startup/FeasibilityForm.vue";
 import FeasibilityDetail from "../views/startup/FeasibilityDetail.vue";
 import EthicsForm from "../views/startup/EthicsForm.vue";
@@ -93,6 +96,12 @@ const routes: RouteRecordRaw[] = [
     component: ForgotPassword,
     meta: { public: true, title: TEXT.modules.auth.forgotTitle },
   },
+  {
+    path: "/collaboration/share",
+    name: "CollaborationPublicShare",
+    component: CollaborationShareWorkspace,
+    meta: { public: true, title: "共享协作文件" },
+  },
   {
     path: "/desktop/server-settings",
     name: "DesktopServerSettings",
@@ -206,6 +215,12 @@ const routes: RouteRecordRaw[] = [
         component: OfficePreviewWorkspace,
         meta: { title: "Office 文件预览", requiresStudy: true, fullBleed: true, transientWorkspaceTask: true },
       },
+      {
+        path: "office-preview/collaboration/:fileId/revision/:id",
+        name: "OfficeCollaborationRevisionPreview",
+        component: OfficePreviewWorkspace,
+        meta: { title: "协作历史版本预览", requiresStudy: true, fullBleed: true, transientWorkspaceTask: true },
+      },
       {
         path: "startup/feasibility-ethics",
         name: "StartupFeasibilityEthics",
@@ -372,6 +387,25 @@ const routes: RouteRecordRaw[] = [
         component: KnowledgeInstructionFiles,
         meta: { title: TEXT.menu.knowledgeInstructionFiles, requiresStudy: true },
       },
+      {
+        path: "knowledge/collaboration",
+        name: "KnowledgeCollaboration",
+        component: CollaborationLibrary,
+        meta: { title: TEXT.menu.knowledgeCollaboration, requiresStudy: true, fullBleed: true },
+      },
+      {
+        path: "knowledge/collaboration/:fileId",
+        name: "KnowledgeCollaborationWorkspace",
+        component: CollaborationWorkspace,
+        meta: {
+          title: TEXT.menu.knowledgeCollaboration,
+          requiresStudy: true,
+          fullBleed: true,
+          immersiveWorkspace: true,
+          transientWorkspaceTask: true,
+          workspaceTaskGroup: TEXT.menu.knowledgeCollaboration,
+        },
+      },
     ],
   },
   {
@@ -575,7 +609,7 @@ router.beforeEach(async (to, _from, next) => {
   const getToken = () => auth.token;
   let token = getToken();
   const isDesktopSessionRestoreRoute = to.path === DESKTOP_SESSION_RESTORE_PATH;
-  if (!auth.user && getToken() && !isDesktopSessionRestoreRoute) {
+  if (!to.meta.public && !auth.user && getToken() && !isDesktopSessionRestoreRoute) {
     try {
       await auth.fetchMe({ disableNetworkRetry: true, suppressErrorMessage: true });
     } catch (error) {