完全移除模块级权限系统，迁移至接口级权限

后端：
- 删除 StudyRolePermission 模型和 project_permissions API 文件
- 重写 project_permissions.py core，移除所有模块级权限函数
- 重写 permission_cache.py，移除模块级权限缓存逻辑
- 新增权限模板功能（PermissionTemplate 模型、API、服务层）
- 新增 permission_templates 数据库迁移
- 迁移 8 个模块（attachments、audit_logs、dashboard、faqs、
  faq_categories、fees_attachments、knowledge_notes、
  material_equipments、overview、subject_histories、subject_pds）
  至接口级权限检查
- 删除所有模块级权限相关测试文件，新增权限模板测试

前端：
- 删除 ProjectPermissions.vue 和 ProjectPermissionsModule.vue
- 重写 projectRoutePermissions.ts，改为基于接口级权限格式
- 更新 store/study.ts、router/index.ts、AuditLogs.vue、Projects.vue
  中的权限 API 调用，从 fetchProjectRolePermissions 改为
  fetchApiEndpointPermissions
- 清理 types/api.ts 中的旧模块级权限类型定义
- 新增 PermissionTemplateSelector.vue 组件
- 更新权限管理页面，移除模块级权限 tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/app/schemas/permission_template.py

@@ -0,0 +1,69 @@
+from datetime import datetime
+from enum import Enum
+from typing import Optional
+from uuid import UUID
+
+from pydantic import BaseModel, Field
+
+
+class TemplateType(str, Enum):
+    ROLE = "ROLE"
+    SCENARIO = "SCENARIO"
+    CUSTOM = "CUSTOM"
+
+
+class PermissionTemplateVersionRead(BaseModel):
+    id: UUID
+    version: int
+    change_log: Optional[str] = None
+    created_at: datetime
+
+
+class PermissionTemplateCreate(BaseModel):
+    name: str = Field(..., min_length=1, max_length=100)
+    description: Optional[str] = Field(None, max_length=500)
+    template_type: TemplateType
+    permissions: dict  # {role: {endpoint_key: allowed}}
+    tags: Optional[str] = Field(None, max_length=200)
+    category: Optional[str] = Field(None, max_length=50)
+    recommended_roles: Optional[str] = Field(None, max_length=200)
+
+
+class PermissionTemplateUpdate(BaseModel):
+    name: Optional[str] = Field(None, min_length=1, max_length=100)
+    description: Optional[str] = Field(None, max_length=500)
+    permissions: Optional[dict] = None
+    tags: Optional[str] = Field(None, max_length=200)
+    category: Optional[str] = Field(None, max_length=50)
+    recommended_roles: Optional[str] = Field(None, max_length=200)
+
+
+class PermissionTemplateRead(BaseModel):
+    id: UUID
+    name: str
+    description: Optional[str] = None
+    template_type: TemplateType
+    is_system: bool
+    created_by: Optional[UUID] = None
+    created_at: datetime
+    updated_at: datetime
+    permissions: dict
+    tags: Optional[str] = None
+    category: Optional[str] = None
+    recommended_roles: Optional[str] = None
+    versions: list[PermissionTemplateVersionRead] = []
+
+    class Config:
+        from_attributes = True
+
+
+class ApplyTemplateRequest(BaseModel):
+    template_id: UUID
+    roles: Optional[list[str]] = None
+    override: bool = True
+
+
+class ApplyTemplateResponse(BaseModel):
+    study_id: UUID
+    applied_roles: list[str]
+    permissions: dict