fix(health): 客户试用前全局审计修复 — P0 权限旁路 + API 路径 + 事件注册

P0 阻塞修复:
- 修复 PrivateRoute 权限旁路: p.startsWith('auth.') 匹配不到任何权限码,
  改为基于实际权限码的路由级检查 (user.manage/role.manage/organization.manage)
- 修复 deviceReadings API 路径: /patients/{id}/device-readings/daily 改为
  /vital-signs/daily?patient_id=, 消除 404

P1 重要修复:
- 补全事件注册表: 新增 auth(11) + config(8) + workflow(4) + plugin(2) = 25 条
- article_article_tag 联表新增 tenant_id + deleted_at + 审计列 (迁移 107)
- vital_signs_hourly 新增 deleted_at 支持软删除过滤 (迁移 108)
- 6 个页面添加权限守卫 (AlertDashboard/AlertRuleList/DeviceManage/
  AiAnalysisList/AiUsageDashboard)
- DialysisModule 声明 auth 依赖

crates/erp-server/migration/src/lib.rs

@@ -106,6 +106,8 @@ mod m20260502_000103_seed_follow_up_template_menu;
 mod m20260504_000104_create_vital_signs_daily;
 mod m20260504_000105_alter_patient_devices_add_status;
 mod m20260504_000106_create_api_clients;
+mod m20260504_000107_alter_article_article_tag_add_tenant_and_soft_delete;
+mod m20260504_000108_alter_vital_signs_hourly_add_soft_delete;
 
 pub struct Migrator;
 
@@ -219,6 +221,8 @@ impl MigratorTrait for Migrator {
             Box::new(m20260504_000104_create_vital_signs_daily::Migration),
             Box::new(m20260504_000105_alter_patient_devices_add_status::Migration),
             Box::new(m20260504_000106_create_api_clients::Migration),
+            Box::new(m20260504_000107_alter_article_article_tag_add_tenant_and_soft_delete::Migration),
+            Box::new(m20260504_000108_alter_vital_signs_hourly_add_soft_delete::Migration),
         ]
     }
 }