feat(admin): Add user management and upgrade to module permission system

Features - User Management (Phase 4.1):
- Database: Add user_modules table for fine-grained module permissions
- Database: Add 4 user permissions (view/create/edit/delete) to role_permissions
- Backend: UserService (780 lines) - CRUD with tenant isolation
- Backend: UserController + UserRoutes (648 lines) - 13 API endpoints
- Backend: Batch import users from Excel
- Frontend: UserListPage (412 lines) - list/filter/search/pagination
- Frontend: UserFormPage (341 lines) - create/edit with module config
- Frontend: UserDetailPage (393 lines) - details/tenant/module management
- Frontend: 3 modal components (592 lines) - import/assign/configure
- API: GET/POST/PUT/DELETE /api/admin/users/* endpoints

Architecture Upgrade - Module Permission System:
- Backend: Add getUserModules() method in auth.service
- Backend: Login API returns modules array in user object
- Frontend: AuthContext adds hasModule() method
- Frontend: Navigation filters modules based on user.modules
- Frontend: RouteGuard checks requiredModule instead of requiredVersion
- Frontend: Remove deprecated version-based permission system
- UX: Only show accessible modules in navigation (clean UI)
- UX: Smart redirect after login (avoid 403 for regular users)

Fixes:
- Fix UTF-8 encoding corruption in ~100 docs files
- Fix pageSize type conversion in userService (String to Number)
- Fix authUser undefined error in TopNavigation
- Fix login redirect logic with role-based access check
- Update Git commit guidelines v1.2 with UTF-8 safety rules

Database Changes:
- CREATE TABLE user_modules (user_id, tenant_id, module_code, is_enabled)
- ADD UNIQUE CONSTRAINT (user_id, tenant_id, module_code)
- INSERT 4 permissions + role assignments
- UPDATE PUBLIC tenant with 8 module subscriptions

Technical:
- Backend: 5 new files (~2400 lines)
- Frontend: 10 new files (~2500 lines)
- Docs: 1 development record + 2 status updates + 1 guideline update
- Total: ~4900 lines of code

Status: User management 100% complete, module permission system operational

docs/08-项目管理/PKB迁移-阶段2进行中.md

@@ -1,32 +1,31 @@
-# PKBè¿<EFBFBD>移 - 阶段2进行ä¸?
+# PKB迁移 - 阶段2进行中
 
 ## 🔧 当前问题
 
 **问题**: pkbRoutes导入错误
 **原因**: 使用了命名导出而非默认导出
 
-## �解决方案
+## ✅ 解决方案
 
 修改 `src/index.ts` 的导入语句：
 
 ```typescript
-// â<EFBFBD>?错误（命å<C2BD><C3A5>导出）
+// ❌ 错误（命名导出）
 import { pkbRoutes } from './modules/pkb/index.js';
 
-// �正确（默认导出）
+// ✅ 正确（默认导出）
 import pkbRoutes from './modules/pkb/routes/index.js';
 ```
 
-## ðŸ“<EFBFBD> 已完æˆ?
-- âœ?创建PKB模å<C2A1>—路由入å<C2A5>£
-- âœ?添加å<C2A0>¥åº·æ£€æŸ¥ç«¯ç‚?
-- âœ?在主路由注册PKB模å<C2A1>—
-- âœ?ä¿®å¤<C3A5>导入语å<C2AD>¥
-
-## â<>­ï¸<C3AF> 下一æ­?
-- é‡<C3A9>å<EFBFBD>¯æœ<C3A6>务器测è¯?
-- 验è¯<C3A8>新旧路由都å<C2BD>¯ç”?
+## 📝 已完成
+- ✅ 创建PKB模块路由入口
+- ✅ 添加健康检查端点
+- ✅ 在主路由注册PKB模块
+- ✅ 修复导入语句
 
+## ⏭️ 下一步
+- 重启服务器测试
+- 验证新旧路由都可用