完全移除模块级权限系统，迁移至接口级权限

后端：
- 删除 StudyRolePermission 模型和 project_permissions API 文件
- 重写 project_permissions.py core，移除所有模块级权限函数
- 重写 permission_cache.py，移除模块级权限缓存逻辑
- 新增权限模板功能（PermissionTemplate 模型、API、服务层）
- 新增 permission_templates 数据库迁移
- 迁移 8 个模块（attachments、audit_logs、dashboard、faqs、
  faq_categories、fees_attachments、knowledge_notes、
  material_equipments、overview、subject_histories、subject_pds）
  至接口级权限检查
- 删除所有模块级权限相关测试文件，新增权限模板测试

前端：
- 删除 ProjectPermissions.vue 和 ProjectPermissionsModule.vue
- 重写 projectRoutePermissions.ts，改为基于接口级权限格式
- 更新 store/study.ts、router/index.ts、AuditLogs.vue、Projects.vue
  中的权限 API 调用，从 fetchProjectRolePermissions 改为
  fetchApiEndpointPermissions
- 清理 types/api.ts 中的旧模块级权限类型定义
- 新增 PermissionTemplateSelector.vue 组件
- 更新权限管理页面，移除模块级权限 tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/app/api/v1/knowledge_notes.py

@@ -3,7 +3,7 @@ import uuid
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_current_user, get_db_session, require_study_not_locked, require_study_permission
+from app.core.deps import get_current_user, get_db_session, require_study_not_locked, require_api_permission
 from app.crud import audit as audit_crud
 from app.crud import knowledge_note as note_crud
 from app.crud import site as site_crud
@@ -32,7 +32,7 @@ async def _ensure_site_name_active(db: AsyncSession, study_id: uuid.UUID, site_n
     "/notes",
     response_model=KnowledgeNoteRead,
     status_code=status.HTTP_201_CREATED,
-    dependencies=[Depends(require_study_permission("shared_library", "write"))],
+    dependencies=[Depends(require_api_permission("knowledge_notes:create"))],
 )
 async def create_note(
     study_id: uuid.UUID,
@@ -59,7 +59,7 @@ async def create_note(
 @router.get(
     "/notes",
     response_model=list[KnowledgeNoteRead],
-    dependencies=[Depends(require_study_permission("shared_library", "read"))],
+    dependencies=[Depends(require_api_permission("knowledge_notes:read"))],
 )
 async def list_notes(
     study_id: uuid.UUID,
@@ -77,7 +77,7 @@ async def list_notes(
 @router.get(
     "/notes/{note_id}",
     response_model=KnowledgeNoteRead,
-    dependencies=[Depends(require_study_permission("shared_library", "read"))],
+    dependencies=[Depends(require_api_permission("knowledge_notes:read"))],
 )
 async def get_note(
     study_id: uuid.UUID,
@@ -94,7 +94,7 @@ async def get_note(
 @router.patch(
     "/notes/{note_id}",
     response_model=KnowledgeNoteRead,
-    dependencies=[Depends(require_study_permission("shared_library", "write"))],
+    dependencies=[Depends(require_api_permission("knowledge_notes:update"))],
 )
 async def update_note(
     study_id: uuid.UUID,
@@ -125,7 +125,7 @@ async def update_note(
 @router.delete(
     "/notes/{note_id}",
     status_code=status.HTTP_204_NO_CONTENT,
-    dependencies=[Depends(require_study_permission("shared_library", "write"))],
+    dependencies=[Depends(require_api_permission("knowledge_notes:delete"))],
 )
 async def delete_note(
     study_id: uuid.UUID,