清理全局角色残留并修复项目权限判断

backend/app/core/security.py

@@ -17,7 +17,6 @@ oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/api/v1/auth/login", scheme_name=
 def create_access_token(
     *,
     user_id: str,
-    role: str,
     expires_minutes: Optional[int] = None,
     session_start: Optional[datetime] = None,
 ) -> str:
@@ -26,7 +25,6 @@ def create_access_token(
     session_start_time = session_start or now
     to_encode: Dict[str, Any] = {
         "sub": user_id,
-        "role": role,
         "exp": expire,
         "iat": int(now.timestamp()),
         "orig_iat": int(session_start_time.timestamp()),