feat(admin): Add user management and upgrade to module permission system

Features - User Management (Phase 4.1):
- Database: Add user_modules table for fine-grained module permissions
- Database: Add 4 user permissions (view/create/edit/delete) to role_permissions
- Backend: UserService (780 lines) - CRUD with tenant isolation
- Backend: UserController + UserRoutes (648 lines) - 13 API endpoints
- Backend: Batch import users from Excel
- Frontend: UserListPage (412 lines) - list/filter/search/pagination
- Frontend: UserFormPage (341 lines) - create/edit with module config
- Frontend: UserDetailPage (393 lines) - details/tenant/module management
- Frontend: 3 modal components (592 lines) - import/assign/configure
- API: GET/POST/PUT/DELETE /api/admin/users/* endpoints

Architecture Upgrade - Module Permission System:
- Backend: Add getUserModules() method in auth.service
- Backend: Login API returns modules array in user object
- Frontend: AuthContext adds hasModule() method
- Frontend: Navigation filters modules based on user.modules
- Frontend: RouteGuard checks requiredModule instead of requiredVersion
- Frontend: Remove deprecated version-based permission system
- UX: Only show accessible modules in navigation (clean UI)
- UX: Smart redirect after login (avoid 403 for regular users)

Fixes:
- Fix UTF-8 encoding corruption in ~100 docs files
- Fix pageSize type conversion in userService (String to Number)
- Fix authUser undefined error in TopNavigation
- Fix login redirect logic with role-based access check
- Update Git commit guidelines v1.2 with UTF-8 safety rules

Database Changes:
- CREATE TABLE user_modules (user_id, tenant_id, module_code, is_enabled)
- ADD UNIQUE CONSTRAINT (user_id, tenant_id, module_code)
- INSERT 4 permissions + role assignments
- UPDATE PUBLIC tenant with 8 module subscriptions

Technical:
- Backend: 5 new files (~2400 lines)
- Frontend: 10 new files (~2500 lines)
- Docs: 1 development record + 2 status updates + 1 guideline update
- Total: ~4900 lines of code

Status: User management 100% complete, module permission system operational

backend/package.json

@@ -30,22 +30,22 @@
     "@fastify/jwt": "^10.0.0",
     "@fastify/multipart": "^9.2.1",
     "@prisma/client": "^6.17.0",
-    "bcryptjs": "^2.4.3",
-    "handlebars": "^4.7.8",
-    "jsonwebtoken": "^9.0.2",
     "@types/form-data": "^2.2.1",
     "@wecom/crypto": "^1.0.1",
     "ajv": "^8.17.1",
     "axios": "^1.12.2",
+    "bcryptjs": "^2.4.3",
     "bullmq": "^5.65.0",
     "diff-match-patch": "^1.0.5",
     "dotenv": "^17.2.3",
     "exceljs": "^4.4.0",
     "fastify": "^5.6.1",
     "form-data": "^4.0.4",
+    "handlebars": "^4.7.8",
     "html2canvas": "^1.4.1",
     "js-yaml": "^4.1.0",
     "jsonrepair": "^3.13.1",
+    "jsonwebtoken": "^9.0.2",
     "jspdf": "^3.0.3",
     "p-queue": "^9.0.1",
     "pg-boss": "^12.5.2",
@@ -61,6 +61,7 @@
     "@types/js-yaml": "^4.0.9",
     "@types/jsonwebtoken": "^9.0.7",
     "@types/node": "^24.7.1",
+    "@types/uuid": "^10.0.0",
     "@types/winston": "^2.4.4",
     "@types/xml2js": "^0.4.14",
     "better-sqlite3": "^12.4.6",