feat(assets): add dimension analysis and authorized user previews

Refactor asset drilldowns with combined dimension filters, parent summaries and progressive loading. Add the hidden /who read-only permission preview with scoped authorization, identity mapping and audit logging. Refine inventory counts and AI问数 presentation.

src/components/FeedbackFab.tsx

@@ -1,5 +1,5 @@
 import { useEffect, useRef, useState } from 'react';
-import { fetchJson } from '../auth/api-client';
+import { fetchJson, fetchAuthenticated } from '../auth/api-client';
 import { useAuth } from '../auth/useAuth';
 import { canManageFeedback } from '../shared/auth/roles';
 import FeedbackHistoryDrawer from './FeedbackHistoryDrawer';
@@ -13,10 +13,8 @@ const MAX_IMG_SIZE_MB = 5;
 async function uploadImage(file: File): Promise<string> {
   const fd = new FormData();
   fd.append('file', file);
-  const token = sessionStorage.getItem('bi_jwt');
-  const res = await fetch('/api/feedback/upload', {
+  const res = await fetchAuthenticated('/api/feedback/upload', {
     method: 'POST',
-    headers: token ? { Authorization: `Bearer ${token}` } : {},
     body: fd,
   });
   const json = await res.json();