feat(client): 用户管理页 + E2E 门禁（E15/E16/E18）

- 新增系统用户管理页（创建/禁用启用/重置密码/角色）

- 引入 Playwright E2E：覆盖登录-报销-待办-票据-OCR-支付-登出

- 新增 ci-e2e 工作流（PR + nightly）

client/src/router/index.tsx

@@ -11,6 +11,7 @@ import { NotFoundPage } from "../pages/NotFoundPage";
 import { ProfilePage } from "../pages/ProfilePage";
 import { ReimbursementDetailPage } from "../pages/ReimbursementDetailPage";
 import { ReimbursementsPage } from "../pages/ReimbursementsPage";
+import { UserManagementPage } from "../pages/UserManagementPage";
 import { WorkflowTaskDetailPage } from "../pages/WorkflowTaskDetailPage";
 import { WorkflowTasksPage } from "../pages/WorkflowTasksPage";
 import { GuestOnly, RequireAuth, RequirePermission } from "./guards";
@@ -103,6 +104,15 @@ export function AppRouter() {
           }
         />
 
+        <Route
+          path="system/users"
+          element={
+            <RequirePermission anyOf={["system.users"]}>
+              <UserManagementPage />
+            </RequirePermission>
+          }
+        />
+
         <Route path="settings/profile" element={<ProfilePage />} />
       </Route>