feat: 完善知识库、策略预览与OnlyOffice集成

## 配置与环境
- .env.example: 更新环境变量配置
- docker-compose.yml: 完善Docker编排配置
- docker/README.md: 更新Docker文档

## 后端知识库模块
- endpoints/knowledge.py: 增强知识库API端点
- schemas/knowledge.py: 扩展知识库数据模型
- services/knowledge.py: 完善知识库业务逻辑
- config.py: 优化配置管理
- storage/knowledge/.index.json: 更新知识库索引

## 前端功能
- api.js: 完善API服务层
- knowledge.js: 优化知识库服务
- onlyoffice.js: 新增OnlyOffice文档服务集成
- TopBar.vue: 优化顶部导航栏
- PoliciesView.vue: 完善策略视图
- AppShellRouteView.vue: 新增应用外壳路由视图
- views/scripts/PoliciesView.js: 优化策略脚本
- policiesPreviewFormatters.js: 新增策略预览格式化工具

## 样式
- policies-view.css: 完善策略页样式

## 测试
- api-request.test.mjs: API请求测试
- onlyoffice-service.test.mjs: OnlyOffice服务测试
- policies-preview-formatters.test.mjs: 策略预览格式化测试

server/src/app/api/v1/endpoints/knowledge.py

@@ -10,6 +10,8 @@ from app.schemas.knowledge import (
     KnowledgeActionResponse,
     KnowledgeDocumentDetailRead,
     KnowledgeLibraryRead,
+    KnowledgeOnlyOfficeCallbackRead,
+    KnowledgeOnlyOfficeConfigRead,
 )
 from app.services.knowledge import KnowledgeService
 
@@ -34,6 +36,19 @@ def get_knowledge_document(
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="知识库文件不存在。") from exc
 
 
+@router.get("/documents/{document_id}/onlyoffice-config", response_model=KnowledgeOnlyOfficeConfigRead)
+def get_knowledge_document_onlyoffice_config(
+    document_id: str,
+    current_user: Annotated[CurrentUserContext, Depends(get_current_user)],
+) -> KnowledgeOnlyOfficeConfigRead:
+    try:
+        return KnowledgeService().build_onlyoffice_config(document_id, current_user)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="知识库文件不存在。") from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(exc)) from exc
+
+
 @router.post("/documents", response_model=KnowledgeDocumentDetailRead, status_code=status.HTTP_201_CREATED)
 async def upload_knowledge_document(
     request: Request,
@@ -74,3 +89,36 @@ def get_knowledge_document_content(
 
     _ = disposition
     return FileResponse(file_path, media_type=media_type, filename=filename)
+
+
+@router.get("/documents/{document_id}/onlyoffice/content")
+def get_knowledge_document_onlyoffice_content(
+    document_id: str,
+    access_token: Annotated[str, Query(min_length=1)],
+) -> FileResponse:
+    try:
+        service = KnowledgeService()
+        service.validate_onlyoffice_access_token(document_id, access_token)
+        file_path, media_type, filename = service.get_document_content(document_id)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="知识库文件不存在。") from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail=str(exc)) from exc
+
+    return FileResponse(file_path, media_type=media_type, filename=filename)
+
+
+@router.post("/documents/{document_id}/onlyoffice/callback", response_model=KnowledgeOnlyOfficeCallbackRead)
+async def handle_knowledge_document_onlyoffice_callback(
+    document_id: str,
+    request: Request,
+) -> KnowledgeOnlyOfficeCallbackRead:
+    payload = await request.json()
+    try:
+        KnowledgeService().handle_onlyoffice_callback(document_id, payload)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="知识库文件不存在。") from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(exc)) from exc
+
+    return KnowledgeOnlyOfficeCallbackRead()