feat(P25-1/P25-5/P26-1/P26-3/P24-1/P29-4): 落地内部OA够用版后端与试运行能力

关联 Issue: P25-1, P25-2, P25-3, P25-4, P25-5, P26-1, P26-3, P24-1, P24-2, P29-1, P29-2, P29-3, P29-4

server/src/constants/permissions.js

@@ -152,6 +152,7 @@ const ROLE_PERMISSIONS = {
     "budget.view",
     "expense.approve",
     "expense.finance.pay",
+    "payment.batch.manage",
     "expense.view_all",
     "procurement.view_all",
     "travel.view_all",
@@ -171,6 +172,7 @@ const ROLE_PERMISSIONS = {
     "ai.assist",
     "expense.approve",
     "expense.finance.pay",
+    "payment.batch.manage",
     "expense.view_all",
     "expense.finance.override_duplicate",
     "procurement.view_all",
@@ -183,6 +185,8 @@ const ROLE_PERMISSIONS = {
     "asset.inventory",
     "system.settings",
     "system.audit.view",
+    "payment.batch.manage",
+    "risk.review.manage",
   ],
   administration: [
     "expense.proxy_submit",