feat: DingTalk attendance import + integration config + expense types + UI polish

Server:
- Add DingTalk attendance import service with SSE progress streaming
- Add IntegrationConfig entity & module for multi-tenant DingTalk setup
- Add ExpenseType entity & ExpenseTypesModule
- Add SeedModule for DB initialization
- Add UserDingMapping entity for DingTalk user linkage
- Attendance service: import flow with dedup & student auto-mapping
- Rooms service: time-range overlap queries
- Sync controller/service: DingTalk integration wiring
- Permission guard: refactor to pure re-export
- Campus scope middleware: tenant-aware filtering

Admin UI:
- Attendance page: import UI with progress & result summary
- All pages: tableStyle/tablePagination standardization
- Login page: responsive styling
- Sensitive data: useViewSensitive hook for masked viewing
- Vite config: path aliases, build optimization
- Test infra: vitest config, test utilities

Docs: PRD DingTalk batch 1 & 2 design docs

apps/admin/src/pages/Permissions/index.tsx

@@ -1,5 +1,5 @@
 import React, { useEffect, useState } from 'react';
-import { Card, Tag, Input, Space, Spin } from 'antd';
+import { Card, Tag, Input, Space, Spin, Empty } from 'antd';
 import api from '../../api';
 
 interface PermissionItem {
@@ -68,6 +68,7 @@ const PermissionsPage: React.FC = () => {
         <h2 style={{ margin: 0 }}>权限一览</h2>
         <Input.Search
           placeholder="搜索权限名称或编码"
+          aria-label="搜索权限名称或编码"
           allowClear
           style={{ width: 280 }}
           onSearch={setSearch}
@@ -97,6 +98,7 @@ const PermissionsPage: React.FC = () => {
             </Space>
           </Card>
         ))}
+        {filteredTree.length === 0 && <Empty description="未找到匹配的权限" />}
       </Space>
     </div>
   );