feat(plugin): P1-P4 审计修复 — 第一批 (Excel/CSV导出 + 市场API + 对账扫描)

1.1 Excel/CSV 导出:
- 后端 export 支持 format 参数 (json/csv/xlsx)
- rust_xlsxwriter 生成带样式 Excel
- 前端导出按钮改为 Dropdown 格式选择 (JSON/CSV/Excel)
- blob 下载支持 CSV/XLSX 二进制格式

1.2 市场后端 API + 前端对接:
- SeaORM Entity: market_entry, market_review
- API: 浏览/详情/一键安装/评论列表/提交评分
- 一键安装: upload → install → enable 一条龙 + 依赖检查
- 前端 PluginMarket 对接真实 API (搜索/分类/安装/评分)

1.3 对账扫描:
- reconcile_references() 扫描跨插件引用悬空 UUID
- POST /plugins/{plugin_id}/reconcile 端点

crates/erp-plugin/src/entity/market_entry.rs

@@ -0,0 +1,45 @@
+use sea_orm::entity::prelude::*;
+use serde::{Deserialize, Serialize};
+
+#[derive(Clone, Debug, PartialEq, DeriveEntityModel, Serialize, Deserialize)]
+#[sea_orm(table_name = "plugin_market_entries")]
+pub struct Model {
+    #[sea_orm(primary_key, auto_increment = false)]
+    pub id: Uuid,
+    pub plugin_id: String,
+    pub name: String,
+    pub version: String,
+    pub description: Option<String>,
+    pub author: Option<String>,
+    pub category: Option<String>,
+    pub tags: Option<serde_json::Value>,
+    pub icon_url: Option<String>,
+    pub screenshots: Option<serde_json::Value>,
+    #[serde(skip)]
+    pub wasm_binary: Vec<u8>,
+    #[serde(skip_serializing)]
+    pub manifest_toml: String,
+    pub wasm_hash: String,
+    pub min_platform_version: Option<String>,
+    pub status: String,
+    pub download_count: i32,
+    pub rating_avg: Decimal,
+    pub rating_count: i32,
+    pub changelog: Option<String>,
+    pub created_at: DateTimeUtc,
+    pub updated_at: DateTimeUtc,
+}
+
+#[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
+pub enum Relation {
+    #[sea_orm(has_many = "super::market_review::Entity")]
+    MarketReview,
+}
+
+impl Related<super::market_review::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::MarketReview.def()
+    }
+}
+
+impl ActiveModelBehavior for ActiveModel {}

crates/erp-plugin/src/entity/market_review.rs

@@ -0,0 +1,33 @@
+use sea_orm::entity::prelude::*;
+use serde::{Deserialize, Serialize};
+
+#[derive(Clone, Debug, PartialEq, DeriveEntityModel, Serialize, Deserialize)]
+#[sea_orm(table_name = "plugin_market_reviews")]
+pub struct Model {
+    #[sea_orm(primary_key, auto_increment = false)]
+    pub id: Uuid,
+    pub tenant_id: Uuid,
+    pub user_id: Uuid,
+    pub market_entry_id: Uuid,
+    pub rating: i32,
+    pub review_text: Option<String>,
+    pub created_at: DateTimeUtc,
+}
+
+#[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
+pub enum Relation {
+    #[sea_orm(
+        belongs_to = "super::market_entry::Entity",
+        from = "Column::MarketEntryId",
+        to = "super::market_entry::Column::Id"
+    )]
+    MarketEntry,
+}
+
+impl Related<super::market_entry::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::MarketEntry.def()
+    }
+}
+
+impl ActiveModelBehavior for ActiveModel {}

crates/erp-plugin/src/entity/mod.rs

@@ -1,3 +1,5 @@
+pub mod market_entry;
+pub mod market_review;
 pub mod plugin;
 pub mod plugin_entity;
 pub mod plugin_event_subscription;