权限监控与管理界面全面美化

重新设计权限系统所有 UI 组件的视觉风格，统一配色、圆角、阴影和交互动效：
- 实时概览：统计卡片加图标和渐变色条，健康评分改为环形进度，告警改为卡片式
- 趋势分析：图表卡片加彩色图标标识，ECharts 配色升级为渐变面积填充
- 访问日志：指标卡片带图标，日志审计改为卡片式入口，IP排行前三高亮
- IP属地：工具栏重设计，排行列表前三渐变高亮，指标卡片统一新风格
- 系统级权限：从 el-table 改为自定义卡片列表，模块块独立圆角卡片
- 项目权限配置：空状态引导优化，成员表格加头像，工具栏加背景容器
- 角色概览卡片：加进度条可视化，hover 微动效
- 接口权限矩阵：工具栏分离布局，表格圆角包裹
- 角色管理抽屉：侧边栏选中态渐变，操作行 hover 高亮

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

frontend/src/utils/projectRoutePermissions.test.ts

@@ -2,18 +2,22 @@ import { describe, expect, it } from "vitest";
 import { findFirstAccessibleProjectPath, getProjectRoutePermission, hasProjectPermission } from "./projectRoutePermissions";
 
 describe("project route permissions", () => {
-  it("maps project routes to read permission modules", () => {
-    expect(getProjectRoutePermission("/project/overview")).toEqual({ module: "project_overview", action: "read" });
-    expect(getProjectRoutePermission("/knowledge/medical-consult/abc")).toEqual({ module: "faq", action: "read" });
-    expect(getProjectRoutePermission("/knowledge/notes/new")).toEqual({ module: "shared_library", action: "read" });
-    expect(getProjectRoutePermission("/startup/kickoff/new")).toEqual({ module: "startup_auth", action: "read" });
+  it("maps project routes to backend operation keys", () => {
+    expect(getProjectRoutePermission("/project/overview")).toEqual({ operationKey: "project_overview:read" });
+    expect(getProjectRoutePermission("/project/milestones")).toEqual({ operationKey: "project_milestones:read" });
+    expect(getProjectRoutePermission("/finance/contracts")).toEqual({ operationKey: "finance_contracts:read" });
+    expect(getProjectRoutePermission("/drug/shipments")).toEqual({ operationKey: "drug_shipments:read" });
+    expect(getProjectRoutePermission("/startup/feasibility/new")).toEqual({ operationKey: "ethics:read" });
+    expect(getProjectRoutePermission("/startup/kickoff/new")).toEqual({ operationKey: "startup_auth:read" });
+    expect(getProjectRoutePermission("/knowledge/medical-consult/abc")).toEqual({ operationKey: "faq:read" });
+    expect(getProjectRoutePermission("/knowledge/notes/new")).toEqual({ operationKey: "knowledge_notes:read" });
   });
 
-  it("rejects project routes when the role lacks module read permission", () => {
+  it("rejects project routes when the role lacks operation permission", () => {
     const matrix = {
       CRA: {
-        project_overview: { read: false, write: false },
-        shared_library: { read: true, write: true },
+        "project_overview:read": { allowed: false },
+        "knowledge_notes:read": { allowed: true },
       },
     } as any;