完全移除模块级权限系统，迁移至接口级权限

后端：
- 删除 StudyRolePermission 模型和 project_permissions API 文件
- 重写 project_permissions.py core，移除所有模块级权限函数
- 重写 permission_cache.py，移除模块级权限缓存逻辑
- 新增权限模板功能（PermissionTemplate 模型、API、服务层）
- 新增 permission_templates 数据库迁移
- 迁移 8 个模块（attachments、audit_logs、dashboard、faqs、
  faq_categories、fees_attachments、knowledge_notes、
  material_equipments、overview、subject_histories、subject_pds）
  至接口级权限检查
- 删除所有模块级权限相关测试文件，新增权限模板测试

前端：
- 删除 ProjectPermissions.vue 和 ProjectPermissionsModule.vue
- 重写 projectRoutePermissions.ts，改为基于接口级权限格式
- 更新 store/study.ts、router/index.ts、AuditLogs.vue、Projects.vue
  中的权限 API 调用，从 fetchProjectRolePermissions 改为
  fetchApiEndpointPermissions
- 清理 types/api.ts 中的旧模块级权限类型定义
- 新增 PermissionTemplateSelector.vue 组件
- 更新权限管理页面，移除模块级权限 tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/utils/projectRoutePermissions.ts

@@ -1,24 +1,23 @@
-import type { ProjectPermissionMatrix, UserRole } from "../types/api";
+import type { ApiEndpointPermissionsResponse } from "../types/api";
 
 export type ProjectRoutePermission = {
-  module: string;
-  action: "read" | "write";
+  operationKey: string;
 };
 
 const routePermissions: Array<{ prefixes: string[]; permission: ProjectRoutePermission }> = [
-  { prefixes: ["/project/overview"], permission: { module: "project_overview", action: "read" } },
-  { prefixes: ["/project/milestones"], permission: { module: "project_milestones", action: "read" } },
-  { prefixes: ["/fees/contracts", "/finance/contracts"], permission: { module: "fees", action: "read" } },
-  { prefixes: ["/drug/shipments", "/materials/equipment"], permission: { module: "materials", action: "read" } },
-  { prefixes: ["/file-versions", "/trial/", "/documents/"], permission: { module: "file_versions", action: "read" } },
-  { prefixes: ["/startup/feasibility-ethics", "/startup/feasibility", "/startup/ethics"], permission: { module: "startup_ethics", action: "read" } },
-  { prefixes: ["/startup/meeting-auth", "/startup/kickoff", "/startup/training"], permission: { module: "startup_auth", action: "read" } },
-  { prefixes: ["/subjects"], permission: { module: "subjects", action: "read" } },
-  { prefixes: ["/risk-issues"], permission: { module: "risk_issues", action: "read" } },
-  { prefixes: ["/monitoring-audit", "/monitoring", "/audit"], permission: { module: "monitoring_audit", action: "read" } },
-  { prefixes: ["/etmf"], permission: { module: "etmf", action: "read" } },
-  { prefixes: ["/knowledge/medical-consult"], permission: { module: "faq", action: "read" } },
-  { prefixes: ["/knowledge/notes", "/knowledge/support-files", "/knowledge/instruction-files"], permission: { module: "shared_library", action: "read" } },
+  { prefixes: ["/project/overview"], permission: { operationKey: "project_overview:read" } },
+  { prefixes: ["/project/milestones"], permission: { operationKey: "project_milestones:read" } },
+  { prefixes: ["/fees/contracts", "/finance/contracts"], permission: { operationKey: "fees_contracts:read" } },
+  { prefixes: ["/drug/shipments", "/materials/equipment"], permission: { operationKey: "material_equipments:read" } },
+  { prefixes: ["/file-versions", "/trial/", "/documents/"], permission: { operationKey: "documents:read" } },
+  { prefixes: ["/startup/feasibility-ethics", "/startup/feasibility", "/startup/ethics"], permission: { operationKey: "startup_ethics:read" } },
+  { prefixes: ["/startup/meeting-auth", "/startup/kickoff", "/startup/training"], permission: { operationKey: "startup_auth:read" } },
+  { prefixes: ["/subjects"], permission: { operationKey: "subjects:read" } },
+  { prefixes: ["/risk-issues"], permission: { operationKey: "risk_issues:read" } },
+  { prefixes: ["/monitoring-audit", "/monitoring", "/audit"], permission: { operationKey: "monitoring_audit:read" } },
+  { prefixes: ["/etmf"], permission: { operationKey: "documents:read" } },
+  { prefixes: ["/knowledge/medical-consult"], permission: { operationKey: "faq:read" } },
+  { prefixes: ["/knowledge/notes", "/knowledge/support-files", "/knowledge/instruction-files"], permission: { operationKey: "knowledge_notes:read" } },
 ];
 
 export const projectRouteLandingPaths = [
@@ -51,19 +50,18 @@ export const getProjectRoutePermission = (path: string): ProjectRoutePermission
 };
 
 export const hasProjectPermission = (
-  matrix: ProjectPermissionMatrix | null | undefined,
+  permissions: ApiEndpointPermissionsResponse | null | undefined,
   role: string | null | undefined,
   permission: ProjectRoutePermission | null,
   isAdmin: boolean,
 ) => {
   if (!permission || isAdmin) return true;
-  if (!role) return false;
-  const typedRole = role as UserRole;
-  return !!matrix?.[typedRole]?.[permission.module]?.[permission.action];
+  if (!role || !permissions) return false;
+  return !!permissions[role]?.[permission.operationKey]?.allowed;
 };
 
 export const findFirstAccessibleProjectPath = (
-  matrix: ProjectPermissionMatrix | null | undefined,
+  permissions: ApiEndpointPermissionsResponse | null | undefined,
   role: string | null | undefined,
   isAdmin: boolean,
-) => projectRouteLandingPaths.find((path) => hasProjectPermission(matrix, role, getProjectRoutePermission(path), isAdmin)) || null;
+) => projectRouteLandingPaths.find((path) => hasProjectPermission(permissions, role, getProjectRoutePermission(path), isAdmin)) || null;