refactor(grades,diagnostic): 成绩和学情诊断模块审计修复

P0-1: 10 个页面补充 requirePermission 权限校验
P0-2: diagnostic/data-access-reports.ts 移除直查 users 表，改用 getUserNamesByIds
P0-3: 新增 grade/grades/diagnostic 三组 i18n 翻译文件（zh-CN/en）
P0-4: 新增 /management/grade 重定向页面

P1-2: 抽取 toNumber/normalize/buildScopeClassFilter 到 lib/grade-utils.ts
P1-3: 为 12 个 Action 新增 Zod safeParse 校验（schema.ts +12 查询 schema）
P1-4: 修复 as 断言违规，改用类型守卫函数

P2-2: 移除 diagnostic 组件中 Tailwind 任意值

同步更新架构图文档 004 和 005

src/modules/grades/data-access-ranking.ts

@@ -8,21 +8,12 @@ import { gradeRecords } from "@/shared/db/schema"
 import { getStudentActiveClassId } from "@/modules/classes/data-access"
 import { getUserNamesByIds } from "@/modules/users/data-access"
 
+import { normalize, toNumber } from "./lib/grade-utils"
 import type {
   RankingTrendPoint,
   RankingTrendResult,
 } from "./types"
 
-const toNumber = (v: unknown): number => {
-  const n = typeof v === "number" ? v : Number(v)
-  return Number.isFinite(n) ? n : 0
-}
-
-const normalize = (score: number, fullScore: number): number => {
-  if (fullScore <= 0) return 0
-  return Math.round((score / fullScore) * 10000) / 100
-}
-
 /**
  * Get a student's ranking trend across assessments within their class.
  * Each point represents one assessment (grouped by title), with the