feat(app): add error/loading boundaries across all dashboard routes and new routes

- Add error.tsx and loading.tsx boundaries for admin, parent, student, teacher routes

- Add admin announcements edit, audit-logs overview, curriculum-map, invitation-codes, permissions, questions, roles routes

- Add admin elective detail and components, files, course-plans, users, scheduling boundaries

- Add messages group-compose route

- Add parent course-plans, elective, grades report-card, practice routes

- Add student course-plans, elective detail, error-book dialogs, grades report-card, learning study-path, leave, schedule boundaries

- Add teacher attendance report, classes boundaries, course-plans boundaries, elective, exams analytics/edit-rich/all/create/new, grades report-card, homework boundaries, leave, lesson-plans calendar

- Add auth loading, onboarding loading, api cron

src/app/(dashboard)/admin/elective/page.tsx

@@ -1,29 +1,26 @@
-import type { Metadata } from "next"
 import type { JSX } from "react"
+import { Suspense } from "react"
 import { getTranslations } from "next-intl/server"
 
-import { getElectiveCourses } from "@/modules/elective/data-access"
-import { ElectiveCourseList } from "@/modules/elective/components/elective-course-list"
+import { requirePermission } from "@/shared/lib/auth-guard"
+import { Permissions } from "@/shared/types/permissions"
 import { ElectivePageLayout } from "@/modules/elective/components/elective-page-layout"
-import { getSearchParam, type SearchParams } from "@/shared/lib/utils"
-import type { ElectiveCourseStatus } from "@/modules/elective/types"
+import { type SearchParams } from "@/shared/lib/utils"
+
+import { StatsCardsLoader } from "./_components/stats-cards-loader"
+import { CourseListLoader } from "./_components/course-list-loader"
+import { StatsCardsSkeleton, CourseListSkeleton } from "./loading"
 
 export const dynamic = "force-dynamic"
 
-const isValidStatus = (v?: string): v is ElectiveCourseStatus =>
-  v === "draft" || v === "open" || v === "closed" || v === "cancelled"
-
 export default async function AdminElectivePage({
   searchParams,
 }: {
   searchParams: Promise<SearchParams>
 }): Promise<JSX.Element> {
-  const sp = await searchParams
   const t = await getTranslations("elective")
-  const statusParam = getSearchParam(sp, "status")
-  const status = isValidStatus(statusParam) ? statusParam : undefined
-
-  const courses = await getElectiveCourses({ status })
+  // 纵深防御：除中间件外，Server Component 入口再次校验权限
+  await requirePermission(Permissions.ELECTIVE_READ)
 
   const header = (
     <div className="space-y-1">
@@ -36,12 +33,12 @@ export default async function AdminElectivePage({
 
   return (
     <ElectivePageLayout header={header}>
-      <ElectiveCourseList
-        courses={courses}
-        canManage
-        createHref="/admin/elective/create"
-        editBaseHref="/admin/elective"
-      />
+      <Suspense fallback={<StatsCardsSkeleton />}>
+        <StatsCardsLoader />
+      </Suspense>
+      <Suspense fallback={<CourseListSkeleton />}>
+        <CourseListLoader searchParams={searchParams} />
+      </Suspense>
     </ElectivePageLayout>
   )
 }