feat: add CASL authorization and AI configuration

apps/admin/src/App.tsx

@@ -32,6 +32,7 @@ const AttendancePage = lazy(() => import('./pages/Attendance'));
 const TeacherWorkspacePage = lazy(() => import('./pages/TeacherWorkspace'));
 const NotificationsPage = lazy(() => import('./pages/Notifications'));
 const IntegrationConfigPage = lazy(() => import('./pages/IntegrationConfig'));
+const AiConfigPage = lazy(() => import('./pages/AiConfig'));
 
 const PrivateRoute: React.FC<{ children: React.ReactNode }> = ({ children }) => {
   const token = localStorage.getItem('token');
@@ -274,6 +275,15 @@ const App: React.FC = () => {
                   </PermissionRoute>
                 }
               />
+
+              <Route
+                path="ai-config"
+                element={
+                  <PermissionRoute permission="ai:config:read">
+                    <AiConfigPage />
+                  </PermissionRoute>
+                }
+              />
             </Route>
           </Routes>
           </Suspense>