feat(assets): add dimension analysis and authorized user previews

Refactor asset drilldowns with combined dimension filters, parent summaries and progressive loading. Add the hidden /who read-only permission preview with scoped authorization, identity mapping and audit logging. Refine inventory counts and AI问数 presentation.

src/server/auth/permissions.ts

@@ -46,6 +46,6 @@ export function filterByPermission<T>(
   // personal: 仅看自己负责的车辆 (bd = userId)
   return items.filter(v => {
     const obj = v as any;
-    return obj.managerId === user.userId;
+    return (user.managerIds ?? [user.userId]).includes(obj.managerId);
   });
 }