refactor(server): split oversized backend services

server/src/app/services/employee_seed_roles.py

@@ -0,0 +1,52 @@
+from __future__ import annotations
+
+ROLE_DISPLAY_ORDER = {
+    "manager": 1,
+    "finance": 2,
+    "approver": 3,
+    "executive": 4,
+    "auditor": 5,
+    "user": 6,
+}
+
+ROLE_DEFINITIONS = [
+    {
+        "role_code": "user",
+        "name": "使用者",
+        "description": "可以发起报销、查看个人单据和使用 AI 助手。",
+    },
+    {
+        "role_code": "finance",
+        "name": "财务人员",
+        "description": "可以处理复核、查看财务知识与风险校验结果。",
+    },
+    {
+        "role_code": "manager",
+        "name": "管理员",
+        "description": "可以维护员工档案、组织结构和角色权限。",
+    },
+    {
+        "role_code": "executive",
+        "name": "高级管理人员",
+        "description": "可以查看跨部门数据看板与关键审批结果。",
+    },
+    {
+        "role_code": "approver",
+        "name": "审批负责人",
+        "description": "可以处理审批中心中的待审单据。",
+    },
+    {
+        "role_code": "auditor",
+        "name": "审计观察员",
+        "description": "可以查看变更记录和权限调整历史。",
+    },
+]
+
+ROLE_PERMISSION_MAP = {
+    "user": ["可发起差旅申请与报销", "可查看个人单据与票据识别结果"],
+    "finance": ["可处理财务复核任务", "可查看风险校验与财务知识库"],
+    "manager": ["可维护员工档案与组织结构", "可配置系统角色与访问边界"],
+    "executive": ["可查看跨部门经营看板", "可处理高金额报销最终审批"],
+    "approver": ["可处理本部门待审单据", "可查看审批链路与 SLA 状态"],
+    "auditor": ["可查看权限变更与审计留痕", "可导出员工权限观察记录"],
+}