feat(assets): add dimension analysis and authorized user previews

Refactor asset drilldowns with combined dimension filters, parent summaries and progressive loading. Add the hidden /who read-only permission preview with scoped authorization, identity mapping and audit logging. Refine inventory counts and AI问数 presentation.

src/modules/admin/FeedbackAdminPage.tsx

@@ -1,7 +1,7 @@
 import { useCallback, useEffect, useState } from 'react';
 import { motion, AnimatePresence } from 'motion/react';
 import { Inbox, RotateCcw, X, Send, CheckCircle2, AlertCircle, Image as ImageIcon, Loader2, ArrowLeft } from 'lucide-react';
-import { fetchJson } from '../../auth/api-client';
+import { fetchJson, fetchAuthenticated } from '../../auth/api-client';
 import { EmptyState, LoadingState, PageFrame, SurfaceCard } from '../../components/ui/surface';
 
 interface FeedbackItem {
@@ -49,10 +49,9 @@ function parseScreenshots(s: FeedbackItem['screenshots']): string[] {
 }
 
 async function patchItem(id: number, data: { status?: string; reply?: string }): Promise<void> {
-  const token = sessionStorage.getItem('bi_jwt');
-  const res = await fetch(`/api/feedback/${id}`, {
+  const res = await fetchAuthenticated(`/api/feedback/${id}`, {
     method: 'PATCH',
-    headers: { 'Content-Type': 'application/json', ...(token ? { Authorization: `Bearer ${token}` } : {}) },
+    headers: { 'Content-Type': 'application/json' },
     body: JSON.stringify(data),
   });
   const json = await res.json();