feat: DingTalk attendance import + integration config + expense types + UI polish

Server:
- Add DingTalk attendance import service with SSE progress streaming
- Add IntegrationConfig entity & module for multi-tenant DingTalk setup
- Add ExpenseType entity & ExpenseTypesModule
- Add SeedModule for DB initialization
- Add UserDingMapping entity for DingTalk user linkage
- Attendance service: import flow with dedup & student auto-mapping
- Rooms service: time-range overlap queries
- Sync controller/service: DingTalk integration wiring
- Permission guard: refactor to pure re-export
- Campus scope middleware: tenant-aware filtering

Admin UI:
- Attendance page: import UI with progress & result summary
- All pages: tableStyle/tablePagination standardization
- Login page: responsive styling
- Sensitive data: useViewSensitive hook for masked viewing
- Vite config: path aliases, build optimization
- Test infra: vitest config, test utilities

Docs: PRD DingTalk batch 1 & 2 design docs

apps/server/src/integration/config/dto/config.dto.ts

@@ -0,0 +1,29 @@
+/** 钉钉配置 */
+export interface DingTalkThirdConfig {
+  agentId: string; // AppKey
+  appSecret: string; // AppSecret
+  corpId: string; // CorpId
+  startEnable: boolean; // 是否启用同步
+  appId?: string; // 内部应用ID，用于消息推送（可选）
+}
+
+/** 企微配置 */
+export interface WeComThirdConfig {
+  agentId: string;
+  appSecret: string;
+  corpId: string;
+  startEnable: boolean;
+}
+
+/** 对外返回的配置（脱敏后，不含 appSecret） */
+export interface ThirdConfigBaseDTO<T = unknown> {
+  type: string;
+  verify?: boolean;
+  config: T;
+}
+
+/** 保存配置的请求体 */
+export interface SaveConfigRequest {
+  type: 'WECOM' | 'DINGTALK';
+  config: DingTalkThirdConfig | WeComThirdConfig;
+}