feat(assets): add dimension analysis and authorized user previews

Refactor asset drilldowns with combined dimension filters, parent summaries and progressive loading. Add the hidden /who read-only permission preview with scoped authorization, identity mapping and audit logging. Refine inventory counts and AI问数 presentation.

src/server/app.ts

@@ -3,6 +3,7 @@ import { Hono } from 'hono';
 import { cors } from 'hono/cors';
 import authRouter from './auth/login.js';
 import { authMiddleware } from './auth/middleware.js';
+import { createPreviewRouter, createPreviewMiddleware } from './auth/preview/routes.js';
 import eleRouter from './routes/ele/index.js';
 import energyRouter from './routes/energy/index.js';
 import feedbackRouter from './routes/feedback/index.js';
@@ -25,6 +26,8 @@ export function createApp(): Hono {
   // 登录接口公开，其余 API 统一经过认证与数据权限检查。
   app.route('/api/auth', authRouter);
   app.use('/api/*', authMiddleware);
+  app.route('/api/permission-preview', createPreviewRouter());
+  app.use('/api/*', createPreviewMiddleware());
 
   app.route('/api/vehicles', vehiclesRouter);
   app.route('/api/asset-assistant', assetAssistantRouter);