feat(ai): Copilot 评分引擎 + Handler + 路由 + 权限码

- scoring.rs: 混合评分 (calculate_risk) + RiskScore/MatchedRule 结构
- engine.rs: CopilotEngine 协调规则评估和评分
- risk_service.rs: 风险计算 + UPSERT 快照 + 规则加载
- insight_service.rs: 洞察 CRUD + 过期清理
- 3 个 Handler: insight/risk/rule，7 个 API 端点
- 5 个权限码: copilot.insights.list/manage, copilot.risk.view, copilot.rules.list/manage
- AiState 扩展 risk_service + insight_service

crates/erp-ai/src/state.rs

@@ -7,8 +7,10 @@ use sea_orm::DatabaseConnection;
 use crate::provider::registry::ProviderRegistry;
 use crate::service::analysis::AnalysisService;
 use crate::service::cache::CacheService;
+use crate::service::insight_service::InsightService;
 use crate::service::prompt::PromptService;
 use crate::service::quota::QuotaService;
+use crate::service::risk_service::RiskService;
 use crate::service::suggestion::SuggestionService;
 use crate::service::usage::UsageService;
 
@@ -24,4 +26,6 @@ pub struct AiState {
     pub provider_registry: Arc<ProviderRegistry>,
     pub quota: Arc<QuotaService>,
     pub cache: Arc<CacheService>,
+    pub risk_service: Arc<RiskService>,
+    pub insight_service: Arc<InsightService>,
 }