fix: 取消CEO默认AP台账权限（09-07-manager-ap-access-scope）

server/tests/unit/workspaceSettings.navigation.test.js

@@ -64,8 +64,8 @@ describe("workspace small-team navigation defaults", () => {
       hasPermission: (candidate, permission) => hasPermission(candidate.permissionCodes, permission),
     });
     const keys = Object.values(navigation.sections).flat().map((item) => item.key);
-    expect(keys.includes("apOperations")).toBe(["ceo", "finance", "finance_mgr"].includes(role));
-    if (role === "manager") expect(keys).toContain("paymentBatches");
+    expect(keys.includes("apOperations")).toBe(["finance", "finance_mgr"].includes(role));
+    if (["manager", "ceo"].includes(role)) expect(keys).toContain("paymentBatches");
   });
 
   it("keeps only the small-team task path in default main navigation", () => {