完善项目权限前置依赖保存校验

- 以接口权限定义中的 prerequisite_permissions 作为前置依赖单一事实源，生成运行时前置权限映射\n- 保存项目角色权限前预检缺失前置权限与受影响下游权限，未确认时返回 409 调整详情\n- 确认保存时自动合并补齐前置权限与取消下游权限，并提供有效权限矩阵读取接口\n- 前端角色权限编辑改为保存时执行依赖校验，弹窗展示需补充前置权限和受影响下游权限\n- 新增编辑权限取消按钮，清理权限选择即时确认弹窗残留\n- 补充后端接口测试、前端权限编辑测试与优化设计文档

frontend/src/components/PermissionTemplateSelector.test.ts

@@ -20,6 +20,7 @@ describe("PermissionTemplateSelector", () => {
   it("reads current project permissions by role key, not by role label", () => {
     const source = readSource();
 
+    expect(source).toContain('v-for="template in sortedTemplates"');
     expect(source).toContain('<span class="card-name">{{ template.name }}</span>');
     expect(source).toContain("refreshKey?: number;");
     expect(source).toContain("watch(() => props.refreshKey, loadTemplates);");
@@ -32,6 +33,15 @@ describe("PermissionTemplateSelector", () => {
     expect(source).toContain("emit('edit-role', template.category!)");
   });
 
+  it("sorts role cards with the shared role template order", () => {
+    const source = readSource();
+
+    expect(source).toContain("useRoleTemplateMeta");
+    expect(source).toContain("compareRolesByTemplateOrder");
+    expect(source).toContain("const sortedTemplates = computed");
+    expect(source).toContain("compareRolesByTemplateOrder(a.category, b.category)");
+  });
+
   it("does not keep hard-coded preset role labels or icons", () => {
     const source = readSource();