完善后台管理与测试支撑

1、为后台用户列表增加关键词和状态筛选，后端同步支持过滤与总数统计。

2、创建用户时要求填写初始密码，并补充前端校验和自动填充隔离。

3、优化项目管理列表角色展示、项目详情抽屉脏数据保护和审计详情抽屉关闭体验。

4、清理旧费用附件关联、统一测试模型注册，并更新迁移端点和注册筛选测试。

frontend/src/views/admin/Users.test.ts

@@ -17,11 +17,27 @@ describe("Admin users table labels", () => {
   });
 });
 
+describe("Admin users filters", () => {
+  it("applies keyword and status filters from the first page", () => {
+    const viewSource = readUsersView();
+
+    expect(viewSource).toContain("@keyup.enter=\"applyFilters\"");
+    expect(viewSource).toContain("@clear=\"applyFilters\"");
+    expect(viewSource).toContain("@change=\"applyFilters\"");
+    expect(viewSource).toContain("@click=\"applyFilters\"");
+    expect(viewSource).toContain("page.value = 1");
+    expect(viewSource).toContain("keyword: searchKeyword.value || undefined");
+    expect(viewSource).toContain("status: statusFilter.value || undefined");
+  });
+});
+
 describe("Admin user form autocomplete", () => {
   it("prevents browser credential autofill when creating a user", () => {
     const formSource = readUserForm();
 
     expect(formSource).toContain('autocomplete="off"');
+    expect(formSource).toContain('name="ctms-create-initial-password"');
+    expect(formSource).toContain('autocomplete="new-password"');
     expect(formSource).not.toContain("current_password");
     expect(formSource).not.toContain("confirmPassword");
     expect(formSource).not.toContain("TEXT.modules.profile.currentPassword");
@@ -29,6 +45,16 @@ describe("Admin user form autocomplete", () => {
   });
 });
 
+describe("Admin user create form password", () => {
+  it("requires an initial password before creating an account", () => {
+    const formSource = readUserForm();
+
+    expect(formSource).toContain('v-if="!user" :label="TEXT.modules.adminUsers.passwordInitial" prop="password"');
+    expect(formSource).toContain("TEXT.modules.adminUsers.passwordInitialRequired");
+    expect(formSource).toContain("/^(?=.*[A-Za-z])(?=.*\\d).{8,}$/");
+  });
+});
+
 describe("Admin user edit form defaults", () => {
   it("hydrates the selected user immediately when the dialog is mounted open", () => {
     const formSource = readUserForm();