feat: refine admin forms, attendance and finance workflows

Squash merge PR #23.

Included changes:
- complete occupancy check-in required fields/default payload
- improve responsive admin management pages
- fix attendance edge cases and attendance period config
- refine wallet/finance-related workflow handling

Checks:
- npm run typecheck -w apps/admin
- npm run typecheck -w apps/server

apps/admin/src/auth/menu-policy.ts

@@ -43,7 +43,12 @@ const SECTIONS: MenuSection[] = [
     icon: 'calendar',
     roles: ['teacher'],
     children: [
-      { key: '/teacher-workspace', label: '今日教学', icon: 'workspace', permission: 'teacher-workspace:view' },
+      {
+        key: '/teacher-workspace',
+        label: '今日教学',
+        icon: 'workspace',
+        permission: 'teacher-workspace:view',
+      },
       { key: '/schedules', label: '我的排课', icon: 'calendar', permission: 'schedule:view' },
       { key: '/attendance', label: '课程考勤', icon: 'attendance', permission: 'attendance:view' },
     ],
@@ -83,11 +88,26 @@ const SECTIONS: MenuSection[] = [
     icon: 'classroom',
     roles: ['classroom', 'super'],
     children: [
-      { key: '/classroom-schedule', label: '教室排期', icon: 'calendar', permission: 'rental:view' },
+      {
+        key: '/classroom-schedule',
+        label: '教室排期',
+        icon: 'calendar',
+        permission: 'rental:view',
+      },
       { key: '/classrooms', label: '教室管理', icon: 'classroom', permission: 'classroom:view' },
-      { key: '/attendance-devices', label: '考勤机绑定', icon: 'attendance', permission: 'classroom:view' },
+      {
+        key: '/attendance-devices',
+        label: '考勤机绑定',
+        icon: 'attendance',
+        permission: 'classroom:view',
+      },
       { key: '/classroom-rentals', label: '租赁订单', icon: 'rental', permission: 'rental:view' },
-      { key: '/organizations', label: '机构管理', icon: 'organization', permission: 'organization:view' },
+      {
+        key: '/organizations',
+        label: '机构管理',
+        icon: 'organization',
+        permission: 'organization:view',
+      },
     ],
   },
   {
@@ -100,13 +120,21 @@ const SECTIONS: MenuSection[] = [
       { key: '/roles', label: '角色管理', icon: 'role', permission: 'role:view' },
       { key: '/permissions', label: '权限一览', icon: 'permission', permission: 'role:view' },
       { key: '/operation-logs', label: '操作日志', icon: 'log', permission: 'log:view' },
-      { key: '/integration-config', label: '钉钉集成', icon: 'integration', permission: 'integration:read' },
+      {
+        key: '/integration-config',
+        label: '钉钉集成',
+        icon: 'integration',
+        permission: 'integration:read',
+      },
       { key: '/ai-config', label: 'AI 配置', icon: 'ai', permission: 'ai:config:read' },
     ],
   },
 ];
 
-export function getRoleDomains(roles: readonly string[], permissions: readonly string[]): Set<string> {
+export function getRoleDomains(
+  roles: readonly string[],
+  permissions: readonly string[],
+): Set<string> {
   const normalized = new Set(roles.map((role) => ROLE_ALIASES[role]).filter(Boolean));
   // 权限可以来自多个叠加角色，因此业务域按能力累加，而不是只选择一个。
   if (permissions.includes('student:view') || permissions.includes('class:view')) {
@@ -167,7 +195,8 @@ export function buildMenu(roles: readonly string[], permissions: readonly string
     const children = section.children
       .filter((child) => permissionSet.has(child.permission))
       .map(({ permission: _, ...child }) => child);
-    if (children.length > 0) sections.push({ ...section, children, roles: undefined } as AppMenuItem);
+    if (children.length > 0)
+      sections.push({ ...section, children, roles: undefined } as AppMenuItem);
   }
 
   if (permissionSet.has('notification:view')) {