feat: DingTalk attendance import + integration config + expense types + UI polish

Server:
- Add DingTalk attendance import service with SSE progress streaming
- Add IntegrationConfig entity & module for multi-tenant DingTalk setup
- Add ExpenseType entity & ExpenseTypesModule
- Add SeedModule for DB initialization
- Add UserDingMapping entity for DingTalk user linkage
- Attendance service: import flow with dedup & student auto-mapping
- Rooms service: time-range overlap queries
- Sync controller/service: DingTalk integration wiring
- Permission guard: refactor to pure re-export
- Campus scope middleware: tenant-aware filtering

Admin UI:
- Attendance page: import UI with progress & result summary
- All pages: tableStyle/tablePagination standardization
- Login page: responsive styling
- Sensitive data: useViewSensitive hook for masked viewing
- Vite config: path aliases, build optimization
- Test infra: vitest config, test utilities

Docs: PRD DingTalk batch 1 & 2 design docs

apps/admin/src/pages/StudentProfile/index.tsx

@@ -1,4 +1,4 @@
-import React from 'react';
+import React, { useCallback } from 'react';
 import { useParams, useNavigate } from 'react-router-dom';
 import { Card, Button, Space } from 'antd';
 import { ArrowLeftOutlined, EyeOutlined } from '@ant-design/icons';
@@ -14,7 +14,7 @@ const StudentProfilePage: React.FC = () => {
 
   const studentId = Number(id);
 
-  const handlePreviewReport = async () => {
+  const handlePreviewReport = useCallback(async () => {
     try {
       const { html } = await api.get<{ html: string }>(`/archive/${studentId}/report-html`);
       const w = window.open('', '_blank');
@@ -25,7 +25,7 @@ const StudentProfilePage: React.FC = () => {
     } catch (err) {
       console.error('Failed to load report HTML:', err);
     }
-  };
+  }, [studentId]);
 
   return (
     <Card