feat(ai): 建议查询/审批 API 端点 + 权限注册

- GET /ai/suggestions?analysis_id=xxx — 查看建议列表（ai.suggestion.list）
- POST /ai/suggestions/{id}/approve — 批准/拒绝建议（ai.suggestion.manage）
- 新增 ai.suggestion.list 和 ai.suggestion.manage 权限码

crates/erp-ai/src/module.rs

@@ -57,6 +57,18 @@ impl ErpModule for AiModule {
                 description: "管理 AI 提供商配置".into(),
                 module: "ai".into(),
             },
+            PermissionDescriptor {
+                code: "ai.suggestion.list".into(),
+                name: "查看 AI 建议".into(),
+                description: "查看 AI 分析生成的建议列表".into(),
+                module: "ai".into(),
+            },
+            PermissionDescriptor {
+                code: "ai.suggestion.manage".into(),
+                name: "审批 AI 建议".into(),
+                description: "批准或拒绝 AI 建议".into(),
+                module: "ai".into(),
+            },
         ]
     }
 
@@ -128,5 +140,13 @@ impl AiModule {
                 "/ai/usage/by-type",
                 axum::routing::get(crate::handler::usage_by_type),
             )
+            .route(
+                "/ai/suggestions",
+                axum::routing::get(crate::handler::suggestion_handler::list_suggestions),
+            )
+            .route(
+                "/ai/suggestions/{id}/approve",
+                axum::routing::post(crate::handler::suggestion_handler::approve_suggestion),
+            )
     }
 }