完全移除模块级权限系统，迁移至接口级权限

后端：
- 删除 StudyRolePermission 模型和 project_permissions API 文件
- 重写 project_permissions.py core，移除所有模块级权限函数
- 重写 permission_cache.py，移除模块级权限缓存逻辑
- 新增权限模板功能（PermissionTemplate 模型、API、服务层）
- 新增 permission_templates 数据库迁移
- 迁移 8 个模块（attachments、audit_logs、dashboard、faqs、
  faq_categories、fees_attachments、knowledge_notes、
  material_equipments、overview、subject_histories、subject_pds）
  至接口级权限检查
- 删除所有模块级权限相关测试文件，新增权限模板测试

前端：
- 删除 ProjectPermissions.vue 和 ProjectPermissionsModule.vue
- 重写 projectRoutePermissions.ts，改为基于接口级权限格式
- 更新 store/study.ts、router/index.ts、AuditLogs.vue、Projects.vue
  中的权限 API 调用，从 fetchProjectRolePermissions 改为
  fetchApiEndpointPermissions
- 清理 types/api.ts 中的旧模块级权限类型定义
- 新增 PermissionTemplateSelector.vue 组件
- 更新权限管理页面，移除模块级权限 tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/tests/test_api_permissions.py

@@ -6,7 +6,6 @@ from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.core.project_permissions import role_has_api_permission
 from app.models.api_endpoint_permission import ApiEndpointPermission
-from app.models.study_role_permission import StudyRolePermission
 
 
 @pytest.mark.asyncio
@@ -53,50 +52,6 @@ async def test_api_permission_check_denied(db_session: AsyncSession):
     assert result is False
 
 
-@pytest.mark.asyncio
-async def test_api_permission_fallback_to_module_level(db_session: AsyncSession):
-    """测试权限回退 - 接口级权限未配置时回退到模块级权限"""
-    study_id = uuid.uuid4()
-
-    # 创建模块级权限
-    module_perm = StudyRolePermission(
-        study_id=study_id,
-        role="CRA",
-        module="subjects",
-        can_write=True,
-    )
-    db_session.add(module_perm)
-    await db_session.commit()
-
-    # 不创建接口级权限，应该回退到模块级权限（禁用前置权限检查）
-    result = await role_has_api_permission(
-        db_session, study_id, "CRA", "subjects:create", check_prerequisites=False
-    )
-    assert result is True
-
-
-@pytest.mark.asyncio
-async def test_api_permission_fallback_denied(db_session: AsyncSession):
-    """测试权限回退 - 模块级权限被拒绝"""
-    study_id = uuid.uuid4()
-
-    # 创建模块级权限（拒绝）
-    module_perm = StudyRolePermission(
-        study_id=study_id,
-        role="PV",
-        module="subjects",
-        can_write=False,
-    )
-    db_session.add(module_perm)
-    await db_session.commit()
-
-    # 不创建接口级权限，应该回退到模块级权限（禁用前置权限检查）
-    result = await role_has_api_permission(
-        db_session, study_id, "PV", "subjects:create", check_prerequisites=False
-    )
-    assert result is False
-
-
 @pytest.mark.asyncio
 async def test_admin_always_allowed(db_session: AsyncSession):
     """测试ADMIN角色总是被允许"""
@@ -108,37 +63,6 @@ async def test_admin_always_allowed(db_session: AsyncSession):
     assert result is True
 
 
-@pytest.mark.asyncio
-async def test_api_permission_priority_over_module(db_session: AsyncSession):
-    """测试接口级权限优先于模块级权限"""
-    study_id = uuid.uuid4()
-
-    # 创建模块级权限（允许）
-    module_perm = StudyRolePermission(
-        study_id=study_id,
-        role="CRA",
-        module="subjects",
-        can_write=True,
-    )
-    db_session.add(module_perm)
-
-    # 创建接口级权限（拒绝）- 应该优先使用这个
-    api_perm = ApiEndpointPermission(
-        study_id=study_id,
-        role="CRA",
-        endpoint_key="subjects:create",
-        allowed=False,
-    )
-    db_session.add(api_perm)
-    await db_session.commit()
-
-    # 应该返回接口级权限的结果（False）（禁用前置权限检查）
-    result = await role_has_api_permission(
-        db_session, study_id, "CRA", "subjects:create", check_prerequisites=False
-    )
-    assert result is False
-
-
 @pytest.mark.asyncio
 async def test_api_permission_read_endpoint(db_session: AsyncSession):
     """测试读取端点权限"""