修正CEO报销财务兜底与部署护栏（07-28-ceo-finance-fallback）

server/src/routes/approvalRules.js

@@ -4,10 +4,12 @@ const { AppError } = require("../utils/AppError");
 const { buildAuditLogData } = require("../utils/audit");
 const { sendData } = require("../utils/reply");
 const { ROLE_PERMISSIONS } = require("../constants/permissions");
-const { BUSINESS_APPROVAL_ROLE_CODES } = require("../utils/workflow");
+const {
+  BUSINESS_APPROVAL_ROLE_CODES,
+  OWNER_SELF_FALLBACK_ROLE_CODES,
+} = require("../utils/workflow");
 
 const MONEY_STRING_SCHEMA = z.string().regex(/^\d+(\.\d{1,2})?$/);
-const OWNER_SELF_FALLBACK_ROLE_CODES = ["finance_mgr"];
 const REIMBURSEMENT_APPROVAL_ROLE_CODES = BUSINESS_APPROVAL_ROLE_CODES.filter(
   (roleCode) => (ROLE_PERMISSIONS[roleCode] ?? []).includes("expense.approve"),
 );
@@ -144,7 +146,7 @@ async function approvalRulesRoutes(fastify) {
             level3_role: body.level3Role ?? null,
             owner_self_fallback_role: Object.prototype.hasOwnProperty.call(body, "ownerSelfFallbackRole")
               ? body.ownerSelfFallbackRole ?? null
-              : "finance_mgr",
+              : "finance",
             enabled: body.enabled ?? true,
             priority,
             created_by: request.employee.id,