feat: sync vehicle monitoring and accumulated platform updates

Add monitoring metrics, numeric sorting, report-time display, vehicle number labels, and map layout fixes. Include accumulated mileage, hydrogen, OneOS authentication, open platform, ingestion, deployment, and UI updates.

Exclude temporary files, generated reports, and credentials. Validate frontend 632 tests and production build, API packages, vehicle-map tests, and release installer tests. Gateway suite has one pre-existing date-sensitive identity throttling test failure reproduced on the parent commit.

vehicle-data-platform/apps/api/internal/platform/access.go

@@ -124,6 +124,9 @@ func (s *Service) ClaimAccessIdentity(ctx context.Context, identityID string, in
 		return AccessIdentityClaimResult{}, clientError{Code: "ACCESS_IDENTITY_INVALID", Message: "待认领来源标识无效，请刷新后重试"}
 	}
 	input.VIN = strings.ToUpper(strings.TrimSpace(input.VIN))
+	if err := authorizeVehicleVIN(ctx, input.VIN); err != nil {
+		return AccessIdentityClaimResult{}, err
+	}
 	if !validAccessClaimVIN(input.VIN) {
 		return AccessIdentityClaimResult{}, clientError{Code: "ACCESS_IDENTITY_VIN_INVALID", Message: "请选择有效的权威 VIN"}
 	}
@@ -230,6 +233,9 @@ func (s *Service) accessRows(ctx context.Context, query AccessQuery) ([]AccessVe
 	order := make([]string, 0, len(evidence))
 	for _, item := range evidence {
 		vin := strings.TrimSpace(item.VIN)
+		if p, ok := PrincipalFromContext(ctx); ok && !p.CanVIN(vin) {
+			continue
+		}
 		if _, exists := byVIN[vin]; !exists {
 			order = append(order, vin)
 		}