完全移除模块级权限系统，迁移至接口级权限

后端：
- 删除 StudyRolePermission 模型和 project_permissions API 文件
- 重写 project_permissions.py core，移除所有模块级权限函数
- 重写 permission_cache.py，移除模块级权限缓存逻辑
- 新增权限模板功能（PermissionTemplate 模型、API、服务层）
- 新增 permission_templates 数据库迁移
- 迁移 8 个模块（attachments、audit_logs、dashboard、faqs、
  faq_categories、fees_attachments、knowledge_notes、
  material_equipments、overview、subject_histories、subject_pds）
  至接口级权限检查
- 删除所有模块级权限相关测试文件，新增权限模板测试

前端：
- 删除 ProjectPermissions.vue 和 ProjectPermissionsModule.vue
- 重写 projectRoutePermissions.ts，改为基于接口级权限格式
- 更新 store/study.ts、router/index.ts、AuditLogs.vue、Projects.vue
  中的权限 API 调用，从 fetchProjectRolePermissions 改为
  fetchApiEndpointPermissions
- 清理 types/api.ts 中的旧模块级权限类型定义
- 新增 PermissionTemplateSelector.vue 组件
- 更新权限管理页面，移除模块级权限 tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/app/core/deps.py

@@ -10,7 +10,7 @@ from app.core.security import decode_token, oauth2_scheme
 from app.crud import user as user_crud
 from app.crud import member as member_crud
 from app.crud import site as site_crud
-from app.core.project_permissions import role_has_project_permission, role_has_api_permission, get_missing_prerequisites
+from app.core.project_permissions import role_has_api_permission, get_missing_prerequisites
 from app.db.session import SessionLocal
 from app.schemas.user import TokenPayload
 
@@ -119,33 +119,6 @@ def require_study_roles(roles: Iterable[str], *, allow_system_admin: bool = True
     return dependency
 
 
-def require_study_permission(module: str, action: str, *, allow_system_admin: bool = True):
-    async def dependency(
-        study_id: uuid.UUID,
-        current_user=Depends(get_current_user),
-        db: AsyncSession = Depends(get_db_session),
-    ):
-        role_value = current_user.role.value if hasattr(current_user.role, "value") else current_user.role
-        if allow_system_admin and role_value == "ADMIN":
-            return current_user
-        membership = await member_crud.get_member(db, study_id, current_user.id)
-        if not membership or not membership.is_active:
-            raise AppException(
-                code="FORBIDDEN",
-                message="不是该项目成员",
-                status_code=status.HTTP_403_FORBIDDEN,
-            )
-        allowed = await role_has_project_permission(db, study_id, membership.role_in_study, module, action)
-        if not allowed:
-            raise AppException(
-                code="FORBIDDEN",
-                message="项目权限不足",
-                status_code=status.HTTP_403_FORBIDDEN,
-            )
-        return current_user
-
-    return dependency
-
 
 def require_api_permission(endpoint_key: str, *, allow_system_admin: bool = True, check_prerequisites: bool = True):
     """基于接口的权限检查（包含前置权限检查）