feat: 平台治理与权限体系完善，存储进度/GPU预留/审批中心与日志整合

- 平台治理: 租户用户权限层次、资源ACL、审批中心与审批模板、访问申请
- 存储: MinIO 存储进度迁移、对象存储安全加固与测试
- 计算: GPU 资源预留、compute 轮询与同步增强
- 权限: permission v2 迁移、权限安全验收测试
- 日志: 后端运行日志中文说明、操作日志整合
- 数据处理/评测: 数据转换与模型评测优化

Co-Authored-By: Claude <noreply@anthropic.com>

backend/app/modules/retention/router.py

@@ -1,10 +1,11 @@
 from __future__ import annotations
 
-from fastapi import APIRouter, Body, Request
+from fastapi import APIRouter, Body, Request, Depends
 from typing import Any
 
 from app.api.v1.endpoints.platform import ok, fail
 from app.db.platform_store import get_platform_store
+from app.core.auth import require_admin
 
 router = APIRouter(prefix="/retention-policies", tags=["retention"])
 
@@ -16,18 +17,18 @@ def _actor(request: Request) -> str | None:
 
 
 @router.get("")
-def list_policies() -> dict[str, Any]:
+def list_policies(current_user: dict = Depends(require_admin)) -> dict[str, Any]:
     return ok(get_platform_store().retention_policies())
 
 
 @router.post("")
-def create_policy(payload: dict[str, Any] = Body(...), request: Request = None) -> dict[str, Any]:
+def create_policy(payload: dict[str, Any] = Body(...), request: Request = None, current_user: dict = Depends(require_admin)) -> dict[str, Any]:
     if not payload.get("name"):
         raise fail(400, "name 必填")
     policy = get_platform_store().create_retention_policy(payload)
     get_platform_store().record_audit(
         action="retention.create",
-        actor_id=_actor(request) if request else None,
+        actor_id=current_user.get("id"),
         target_type="retention_policy",
         target_id=policy["id"],
         detail=f"name={policy.get('name')}",
@@ -36,7 +37,7 @@ def create_policy(payload: dict[str, Any] = Body(...), request: Request = None)
 
 
 @router.get("/{policy_id}")
-def get_policy(policy_id: str) -> dict[str, Any]:
+def get_policy(policy_id: str, current_user: dict = Depends(require_admin)) -> dict[str, Any]:
     try:
         return ok(get_platform_store().retention_policy(policy_id))
     except KeyError:
@@ -45,7 +46,8 @@ def get_policy(policy_id: str) -> dict[str, Any]:
 
 @router.put("/{policy_id}")
 def update_policy(
-    policy_id: str, payload: dict[str, Any] = Body(...), request: Request = None
+    policy_id: str, payload: dict[str, Any] = Body(...), request: Request = None,
+    current_user: dict = Depends(require_admin),
 ) -> dict[str, Any]:
     store = get_platform_store()
     try:
@@ -54,7 +56,7 @@ def update_policy(
         raise fail(404, "retention policy not found")
     store.record_audit(
         action="retention.update",
-        actor_id=_actor(request) if request else None,
+        actor_id=current_user.get("id"),
         target_type="retention_policy",
         target_id=policy_id,
         detail=f"fields={','.join(payload.keys())}",
@@ -63,12 +65,12 @@ def update_policy(
 
 
 @router.delete("/{policy_id}")
-def delete_policy(policy_id: str, request: Request = None) -> dict[str, Any]:
+def delete_policy(policy_id: str, request: Request = None, current_user: dict = Depends(require_admin)) -> dict[str, Any]:
     store = get_platform_store()
     store.delete_retention_policy(policy_id)
     store.record_audit(
         action="retention.delete",
-        actor_id=_actor(request) if request else None,
+        actor_id=current_user.get("id"),
         target_type="retention_policy",
         target_id=policy_id,
     )