feat(P25-2/P25-3/P26-2/P28-1/P24-2/P29-3): 落地内部OA够用版前端入口与运营页面

关联 Issue: P25-2, P25-3, P25-4, P26-2, P26-4, P28-1, P28-2, P28-3, P28-4, P24-2, P29-3

client/src/auth/permissions.ts

@@ -87,6 +87,7 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "budget.view",
     "expense.approve",
     "expense.finance.pay",
+    "payment.batch.manage",
     "expense.view_all",
     "procurement.view_all",
     "travel.view_all",
@@ -106,6 +107,7 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "ai.assist",
     "expense.approve",
     "expense.finance.pay",
+    "payment.batch.manage",
     "expense.view_all",
     "expense.finance.override_duplicate",
     "procurement.view_all",
@@ -118,6 +120,8 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "asset.inventory",
     "system.settings",
     "system.audit.view",
+    "payment.batch.manage",
+    "risk.review.manage",
   ],
   administration: [
     "expense.proxy_submit",