feat: permissions CRUD browser integration + E2E enhancements

Backend:
- permission_handler: 完善权限 CRUD 接口（列表/创建/更新/删除）
- auth_handler: 修复认证处理逻辑
- router: 新增权限管理路由
- handler_test: 新增权限 handler 测试覆盖

Frontend:
- permissions.ts/test.ts: 权限服务层完整实现
- profile/settings/service_tests: 服务适配器修正
- client.ts: HTTP 客户端健壮性增强
- vite.config.js: 构建配置优化
- E2E 脚本: run-playwright-cdp-e2e 大幅增强（权限流程覆盖）

Docs:
- REAL_PROJECT_STATUS: 状态更新
- PRODUCTION_CHECKLIST/QUALITY_STANDARD/TECHNICAL_GUIDE/PROJECT_EXPERIENCE_SUMMARY: 团队规范完善
- plans/2026-04-23: 权限浏览器 CRUD 设计方案

验证: go build 0错误

frontend/admin/src/services/permissions.test.ts

@@ -22,7 +22,7 @@ describe('permissions service', () => {
 
   it('gets permission tree', async () => {
     const mockTree = [
-      { id: 1, name: 'dashboard', children: [{ id: 2, name: 'view' }] },
+      { id: 1, name: 'dashboard', type: 0, children: [{ id: 2, name: 'view', type: 2 }] },
     ]
     getMock.mockResolvedValue(mockTree)
 
@@ -30,13 +30,15 @@ describe('permissions service', () => {
     const result = await getPermissionTree()
 
     expect(getMock).toHaveBeenCalledWith('/permissions/tree')
-    expect(result).toEqual(mockTree)
+    expect(result).toEqual([
+      { id: 1, name: 'dashboard', type: 'menu', children: [{ id: 2, name: 'view', type: 'api' }] },
+    ])
   })
 
   it('lists all permissions', async () => {
     const mockPermissions = [
-      { id: 1, name: 'view dashboard', code: 'dashboard:view' },
-      { id: 2, name: 'edit dashboard', code: 'dashboard:edit' },
+      { id: 1, name: 'view dashboard', code: 'dashboard:view', type: 0 },
+      { id: 2, name: 'edit dashboard', code: 'dashboard:edit', type: 1 },
     ]
     getMock.mockResolvedValue(mockPermissions)
 
@@ -44,40 +46,46 @@ describe('permissions service', () => {
     const result = await listPermissions()
 
     expect(getMock).toHaveBeenCalledWith('/permissions')
-    expect(result).toEqual(mockPermissions)
+    expect(result).toEqual([
+      { id: 1, name: 'view dashboard', code: 'dashboard:view', type: 'menu' },
+      { id: 2, name: 'edit dashboard', code: 'dashboard:edit', type: 'button' },
+    ])
   })
 
   it('gets a single permission', async () => {
-    getMock.mockResolvedValue({ id: 5, name: 'view users', code: 'users:view' })
+    getMock.mockResolvedValue({ id: 5, name: 'view users', code: 'users:view', type: 2 })
 
     const { getPermission } = await import('./permissions')
     const result = await getPermission(5)
 
     expect(getMock).toHaveBeenCalledWith('/permissions/5')
-    expect(result).toEqual({ id: 5, name: 'view users', code: 'users:view' })
+    expect(result).toEqual({ id: 5, name: 'view users', code: 'users:view', type: 'api' })
   })
 
   it('creates a permission', async () => {
     const newPermission = { name: 'new permission', code: 'new:code', type: 'button' as const }
-    const created = { id: 10, ...newPermission }
+    const created = { id: 10, ...newPermission, type: 1 }
     postMock.mockResolvedValue(created)
 
     const { createPermission } = await import('./permissions')
     const result = await createPermission(newPermission)
 
-    expect(postMock).toHaveBeenCalledWith('/permissions', newPermission)
-    expect(result).toEqual(created)
+    expect(postMock).toHaveBeenCalledWith('/permissions', {
+      ...newPermission,
+      type: 1,
+    })
+    expect(result).toEqual({ id: 10, name: 'new permission', code: 'new:code', type: 'button' })
   })
 
   it('updates a permission', async () => {
     const updateData = { name: 'updated name' }
-    putMock.mockResolvedValue({ id: 3, ...updateData })
+    putMock.mockResolvedValue({ id: 3, ...updateData, type: 0 })
 
     const { updatePermission } = await import('./permissions')
     const result = await updatePermission(3, updateData)
 
     expect(putMock).toHaveBeenCalledWith('/permissions/3', updateData)
-    expect(result).toEqual({ id: 3, name: 'updated name' })
+    expect(result).toEqual({ id: 3, name: 'updated name', type: 'menu' })
   })
 
   it('deletes a permission', async () => {