fix: DTO 输入校验补全 + 编译修复 + AuthButton 类型修复

- erp-auth/config/workflow/message/plugin/health: 44 处 DTO 校验缺失修复
- erp-plugin/data_dto: utoipa derive 宏 import 修复
- erp-server/main: tracing 宏类型推断修复
- web AuthButton: AiAnalysisCard/VitalSignsTab Button 包裹在 children 内

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

crates/erp-message/src/dto.rs

@@ -158,7 +158,9 @@ pub struct UpdateTemplateReq {
     pub title_template: Option<String>,
     #[validate(length(min = 1, message = "内容模板不能为空"))]
     pub body_template: Option<String>,
+    #[validate(length(min = 1, max = 10, message = "语言代码无效"))]
     pub language: Option<String>,
+    #[validate(custom(function = "validate_channel"))]
     pub channel: Option<String>,
     pub version: i32,
 }
@@ -182,12 +184,14 @@ pub struct MessageSubscriptionResp {
 }
 
 /// 更新消息订阅偏好请求
-#[derive(Debug, Deserialize, ToSchema)]
+#[derive(Debug, Deserialize, Validate, ToSchema)]
 pub struct UpdateSubscriptionReq {
     pub notification_types: Option<serde_json::Value>,
     pub channel_preferences: Option<serde_json::Value>,
     pub dnd_enabled: Option<bool>,
+    #[validate(length(max = 8, message = "免打扰开始时间格式无效"))]
     pub dnd_start: Option<String>,
+    #[validate(length(max = 8, message = "免打扰结束时间格式无效"))]
     pub dnd_end: Option<String>,
     pub version: i32,
 }