fix: 用专用权限收窄经理 AP 访问（09-07-manager-ap-access-scope）

server/src/routes/apOperations.js

@@ -10,7 +10,7 @@ const {
   listFinanceLedger,
 } = require("../services/financeLedger");
 
-const FINANCE_LEDGER_PERMISSION_CODES = ["payment.batch.manage", "payment.batch.review", "risk.review.manage", "expense.finance.pay"];
+const FINANCE_LEDGER_PERMISSION_CODES = ["finance.ledger.view"];
 
 const FINANCE_LEDGER_QUERY_SCHEMA = z.object({
   page: z.coerce.number().int().min(1).optional(),