feat: 完成 P1 全部功能 + 修复 proxy 导出 + 切换 MySQL 端口至 14013

## P1 功能（20 项）
- 站内消息系统、家长仪表盘、学生考勤管理
- Excel 导入导出、用户批量导入、成绩导出
- 排课规则+自动排课+课表调整
- 成绩趋势+对比分析、密码安全策略、速率限制
- 数据变更日志、文件预览+存储策略、全文检索
- 依赖审计集成 CI、数据库定时备份、E2E 测试完善
- 通知偏好管理

## 基础设施修复
- src/proxy.ts: 将 middleware 导出重命名为 proxy（Next.js 16 要求）
- .env: MySQL 端口从 13002 切换至 14013
- scripts/create-db.ts: 新增数据库初始化脚本

## 架构文档同步
- 004_architecture_impact_map.md 和 005_architecture_data.json
  完整记录所有新增表、模块、路由、权限、依赖关系

src/modules/messaging/components/message-detail.tsx

@@ -0,0 +1,153 @@
+"use client"
+
+import { useState } from "react"
+import Link from "next/link"
+import { useRouter } from "next/navigation"
+import { toast } from "sonner"
+import { ArrowLeft, Mail, Reply, Trash2 } from "lucide-react"
+
+import { Badge } from "@/shared/components/ui/badge"
+import { Button } from "@/shared/components/ui/button"
+import { Card, CardContent, CardHeader, CardTitle } from "@/shared/components/ui/card"
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+} from "@/shared/components/ui/alert-dialog"
+import { formatDate } from "@/shared/lib/utils"
+import { usePermission } from "@/shared/hooks/use-permission"
+import { Permissions } from "@/shared/types/permissions"
+
+import { deleteMessageAction } from "../actions"
+import type { Message } from "../types"
+
+export function MessageDetail({
+  message,
+  currentUserId,
+  backHref = "/messages",
+}: {
+  message: Message
+  currentUserId: string
+  backHref?: string
+}) {
+  const router = useRouter()
+  const [isWorking, setIsWorking] = useState(false)
+  const [deleteOpen, setDeleteOpen] = useState(false)
+  const { hasPermission } = usePermission()
+  const canSend = hasPermission(Permissions.MESSAGE_SEND)
+  const canDelete = hasPermission(Permissions.MESSAGE_DELETE)
+
+  const isReceived = message.receiverId === currentUserId
+  const counterpart = isReceived ? message.senderName : message.receiverName
+  const counterpartLabel = isReceived ? "From" : "To"
+
+  const handleDelete = async () => {
+    setIsWorking(true)
+    try {
+      const res = await deleteMessageAction(message.id)
+      if (res.success) {
+        toast.success(res.message)
+        router.push("/messages")
+        router.refresh()
+      } else {
+        toast.error(res.message || "Failed to delete")
+      }
+    } catch {
+      toast.error("Failed to delete")
+    } finally {
+      setIsWorking(false)
+      setDeleteOpen(false)
+    }
+  }
+
+  const replyHref = canSend
+    ? `/messages/compose?parentId=${message.id}&receiverId=${isReceived ? message.senderId : message.receiverId}&subject=${encodeURIComponent(
+        message.subject?.startsWith("Re:") ? message.subject : `Re: ${message.subject ?? ""}`
+      )}`
+    : undefined
+
+  return (
+    <div className="space-y-6">
+      <div className="flex items-center justify-between gap-2">
+        <div className="flex items-center gap-2">
+          <Button asChild variant="ghost" size="icon">
+            <a href={backHref}>
+              <ArrowLeft className="h-4 w-4" />
+            </a>
+          </Button>
+          <h2 className="text-2xl font-bold tracking-tight">Message</h2>
+        </div>
+        <div className="flex flex-wrap items-center gap-2">
+          {canSend ? (
+            <Button asChild variant="outline">
+              <Link href={replyHref ?? "#"}>
+                <Reply className="mr-2 h-4 w-4" />
+                Reply
+              </Link>
+            </Button>
+          ) : null}
+          {canDelete ? (
+            <Button onClick={() => setDeleteOpen(true)} disabled={isWorking} variant="destructive">
+              <Trash2 className="mr-2 h-4 w-4" />
+              Delete
+            </Button>
+          ) : null}
+        </div>
+      </div>
+
+      <Card>
+        <CardHeader className="space-y-2">
+          <div className="flex flex-wrap items-center gap-2">
+            <Mail className="text-muted-foreground h-4 w-4" />
+            {isReceived && !message.isRead ? (
+              <Badge variant="default">New</Badge>
+            ) : isReceived ? (
+              <Badge variant="secondary">Read</Badge>
+            ) : (
+              <Badge variant="outline">Sent</Badge>
+            )}
+          </div>
+          <CardTitle className="text-2xl">{message.subject ?? "(no subject)"}</CardTitle>
+          <div className="flex flex-wrap items-center gap-2 text-xs text-muted-foreground">
+            <span>
+              {counterpartLabel}: <span className="font-medium">{counterpart ?? "Unknown"}</span>
+            </span>
+            <span>·</span>
+            <span>{formatDate(message.createdAt)}</span>
+            {message.readAt && isReceived ? (
+              <>
+                <span>·</span>
+                <span>Read {formatDate(message.readAt)}</span>
+              </>
+            ) : null}
+          </div>
+        </CardHeader>
+        <CardContent>
+          <p className="text-sm leading-relaxed whitespace-pre-wrap">{message.content}</p>
+        </CardContent>
+      </Card>
+
+      <AlertDialog open={deleteOpen} onOpenChange={setDeleteOpen}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>Delete message</AlertDialogTitle>
+            <AlertDialogDescription>
+              This will permanently delete the message &quot;{message.subject ?? "(no subject)"}&quot;.
+            </AlertDialogDescription>
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel disabled={isWorking}>Cancel</AlertDialogCancel>
+            <AlertDialogAction onClick={handleDelete} disabled={isWorking}>
+              Delete
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+    </div>
+  )
+}