feat(assets): add dimension analysis and authorized user previews

Refactor asset drilldowns with combined dimension filters, parent summaries and progressive loading. Add the hidden /who read-only permission preview with scoped authorization, identity mapping and audit logging. Refine inventory counts and AI问数 presentation.

src/App.tsx

@@ -1,6 +1,7 @@
 import { lazy, Suspense, useEffect, useMemo, useState } from "react";
 import { Shell } from "./components/Shell";
 import AuthProvider from "./auth/AuthProvider";
+import PermissionPreview, { PermissionPreviewPage } from "./auth/PermissionPreview";
 import { useAuth } from "./auth/useAuth";
 import UnauthorizedPage from "./auth/UnauthorizedPage";
 import { canAccessEnergy } from "./shared/auth/roles";
@@ -34,8 +35,8 @@ function AuthGate() {
   }, []);
 
   useEffect(() => {
-    document.title = pathSet === "energy" ? "羚牛氢能-能源BI" : "羚牛氢能-资产BI";
-  }, [pathSet]);
+    document.title = routeKey === "who" ? "权限视角 - 羚牛氢能 BI" : pathSet === "energy" ? "羚牛氢能-能源BI" : "羚牛氢能-资产BI";
+  }, [pathSet, routeKey]);
 
   const modules = useMemo(
     () => buildModules(pathSet, user?.roles),
@@ -68,6 +69,8 @@ function AuthGate() {
     return <UnauthorizedPage message={error || undefined} />;
   }
 
+  if (routeKey === "who") return <PermissionPreviewPage />;
+
   // 隐藏后端管理页：通过路径或 hash 直接访问，主导航不出现
   if (routeKey === "ele/import") {
     return (
@@ -93,10 +96,15 @@ function AuthGate() {
   return <Shell key={pathSet} modules={modules} />;
 }
 
+function AuthenticatedWorkspace() {
+  const { identityVersion = 0 } = useAuth();
+  return <PermissionPreview><AuthGate key={identityVersion} /></PermissionPreview>;
+}
+
 export default function App() {
   return (
     <AuthProvider>
-      <AuthGate />
+      <AuthenticatedWorkspace />
     </AuthProvider>
   );
 }