feat: add CASL authorization and AI configuration

apps/server/src/rbac/rbac.service.ts

@@ -96,6 +96,9 @@ const PRESET_PERMISSIONS: Array<{ code: string; name: string; group: string }> =
   { code: 'department:view', name: '查看部门', group: 'department' },
   { code: 'department:edit', name: '编辑部门', group: 'department' },
   { code: 'department:delete', name: '删除部门', group: 'department' },
+  { code: 'ai:config:read', name: '查看 AI 配置', group: 'ai' },
+  { code: 'ai:config:write', name: '修改 AI 配置', group: 'ai' },
+  { code: 'ai:config:test', name: '测试 AI 连接', group: 'ai' },
 ];
 
 export const PRESET_ROLES: Array<{