feat: 企业权限上限与迁移脚本；管理端/超管概览与财务；双端小程序 tab/订单/历史/测评选择等同步

Made-with: Cursor

api/database/migrations/add_permissions_ceiling.sql

@@ -0,0 +1,7 @@
+-- 企业：permissions = 终端生效；permissionsCeiling = 仅超管可改的上限
+ALTER TABLE mbti_enterprises
+  ADD COLUMN permissionsCeiling json NULL COMMENT '超管功能授权上限' AFTER permissions;
+
+UPDATE mbti_enterprises
+SET permissionsCeiling = permissions
+WHERE permissionsCeiling IS NULL AND permissions IS NOT NULL;