feat(ECR-013A): Admin RBAC 实现并 Closed

角色权限、RequirePermission、/me permissions 与 migration 000015；
Reviewer Approve → Closed。Next：ECR-013B Contract Definition。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin-h5/src/layouts/AdminShell.vue

@@ -33,6 +33,7 @@ async function onLogout() {
       </nav>
       <div class="foot">
         <span class="muted">{{ auth.username || '管理员' }}</span>
+        <span v-if="auth.role" class="role">{{ auth.role }} · {{ auth.permissions.length }} 权</span>
         <button class="btn ghost" type="button" @click="onLogout">退出</button>
       </div>
     </aside>
@@ -72,6 +73,7 @@ nav a.router-link-active {
   box-shadow: 0 4px 12px rgba(229, 77, 66, 0.08);
 }
 .foot { margin-top: auto; display: flex; flex-direction: column; gap: 0.5rem; }
+.role { font-size: 0.75rem; color: var(--muted); }
 .main { padding: 1.5rem 1.75rem; }
 @media (max-width: 800px) {
   .shell { grid-template-columns: 1fr; }