feat: 新增备课模块并修复全模块 P0/P1/P2 缺陷

主要变更:

- 新增 lesson-preparation 模块: 备课编辑器、节点编辑、AI 建议、知识点选择、版本历史、作业发布

- 新增 shared 通用组件: charts/question-bank-filters/schedule-list/ui (chip-nav/filter-bar/page-header/stat-card/stat-item)

- 新增 student/admin 端 loading.tsx 与 error.tsx, 优化加载与错误态体验

- 新增 teacher/lesson-plans 页面 (列表/新建/编辑)

- 新增 drizzle 迁移 0002_tiny_lionheart 及 snapshot

- 新增 textbooks/schema.ts 与 exams/utils/normalize-structure.ts

- 修复 Tiptap v3 SSR hydration 崩溃 (rich-text-block immediatelyRender: false)

- 重构多模块 data-access/actions/组件, 修复权限校验与类型规范

- 同步架构文档 004/005 反映新增模块、导出、依赖关系

- 归档 bugs/* 测试报告与 e2e 测试脚本 (admin/parent/student/teacher web_test)

src/shared/lib/permissions.ts

@@ -1,8 +1,8 @@
-import { Permissions, type Permission } from "@/shared/types/permissions"
+import { Permissions, type Permission, type Role } from "@/shared/types/permissions"
 
 // Role → Permission mapping
 // New roles only need to add an entry here + seed the DB
-export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
+export const ROLE_PERMISSIONS: Record<Role, Permission[]> = {
   admin: [
     Permissions.EXAM_CREATE,
     Permissions.EXAM_READ,
@@ -59,6 +59,9 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.LESSON_PLAN_UPDATE,
     Permissions.LESSON_PLAN_DELETE,
     Permissions.LESSON_PLAN_PUBLISH,
+    Permissions.FILE_UPLOAD,
+    Permissions.FILE_READ,
+    Permissions.FILE_DELETE,
   ],
   teacher: [
     Permissions.EXAM_CREATE,
@@ -116,6 +119,7 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
     Permissions.GRADE_RECORD_READ,
     Permissions.COURSE_PLAN_READ,
     Permissions.ATTENDANCE_READ,
+    Permissions.MESSAGE_SEND,
     Permissions.MESSAGE_READ,
     Permissions.MESSAGE_DELETE,
     Permissions.ELECTIVE_SELECT,
@@ -208,7 +212,7 @@ export const ROLE_PERMISSIONS: Record<string, Permission[]> = {
 /**
  * Merge permissions from all roles (deduplicated)
  */
-export function resolvePermissions(roleNames: string[]): Permission[] {
+export function resolvePermissions(roleNames: Role[]): Permission[] {
   const set = new Set<Permission>()
   for (const name of roleNames) {
     const perms = ROLE_PERMISSIONS[name] ?? []