feat: DingTalk attendance import + integration config + expense types + UI polish

Server:
- Add DingTalk attendance import service with SSE progress streaming
- Add IntegrationConfig entity & module for multi-tenant DingTalk setup
- Add ExpenseType entity & ExpenseTypesModule
- Add SeedModule for DB initialization
- Add UserDingMapping entity for DingTalk user linkage
- Attendance service: import flow with dedup & student auto-mapping
- Rooms service: time-range overlap queries
- Sync controller/service: DingTalk integration wiring
- Permission guard: refactor to pure re-export
- Campus scope middleware: tenant-aware filtering

Admin UI:
- Attendance page: import UI with progress & result summary
- All pages: tableStyle/tablePagination standardization
- Login page: responsive styling
- Sensitive data: useViewSensitive hook for masked viewing
- Vite config: path aliases, build optimization
- Test infra: vitest config, test utilities

Docs: PRD DingTalk batch 1 & 2 design docs

apps/admin/src/pages/Roles/index.tsx

@@ -1,4 +1,4 @@
-import React, { useEffect, useState } from 'react';
+import React, { useEffect, useState, useMemo, useCallback } from 'react';
 import {
   Table,
   Modal,
@@ -39,8 +39,9 @@ const RolesPage: React.FC = () => {
   const [allPerms, setAllPerms] = useState<{ group: string; permissions: PermissionItem[] }[]>([]);
   const [form] = Form.useForm();
   const [selectedPermIds, setSelectedPermIds] = useState<number[]>([]);
+  const [saving, setSaving] = useState(false);
 
-  const fetchData = async () => {
+  const fetchData = useCallback(async () => {
     setLoading(true);
     try {
       const [roles, permTree] = await Promise.all([
@@ -55,11 +56,11 @@ const RolesPage: React.FC = () => {
       console.error(e);
     }
     setLoading(false);
-  };
+  }, []);
 
   useEffect(() => {
     fetchData();
-  }, []);
+  }, [fetchData]);
 
   const handleAdd = () => {
     setEditing(null);
@@ -76,6 +77,7 @@ const RolesPage: React.FC = () => {
   };
 
   const handleSubmit = async () => {
+    setSaving(true);
     const values = await form.validateFields();
     try {
       if (editing) {
@@ -97,6 +99,8 @@ const RolesPage: React.FC = () => {
       fetchData();
     } catch (e: any) {
       message.error(e.message || '操作失败');
+    } finally {
+      setSaving(false);
     }
   };
 
@@ -126,7 +130,7 @@ const RolesPage: React.FC = () => {
     role: '角色管理',
   };
 
-  const columns = [
+  const columns = useMemo(() => [
     { title: 'ID', dataIndex: 'id', width: 80 },
     { title: '名称', dataIndex: 'name', width: 120 },
     { title: '描述', dataIndex: 'description', width: 200 },
@@ -172,7 +176,7 @@ const RolesPage: React.FC = () => {
         </Space>
       ),
     },
-  ];
+  ], []);
 
   const handleGroupCheckAll = (group: string, checked: boolean) => {
     const groupPermIds =
@@ -235,6 +239,7 @@ const RolesPage: React.FC = () => {
         onCancel={() => setModalOpen(false)}
         width={700}
         destroyOnHidden
+        confirmLoading={saving}
       >
         <Form form={form} layout="vertical">
           <Form.Item