feat: 平台治理与权限体系完善，存储进度/GPU预留/审批中心与日志整合

- 平台治理: 租户用户权限层次、资源ACL、审批中心与审批模板、访问申请
- 存储: MinIO 存储进度迁移、对象存储安全加固与测试
- 计算: GPU 资源预留、compute 轮询与同步增强
- 权限: permission v2 迁移、权限安全验收测试
- 日志: 后端运行日志中文说明、操作日志整合
- 数据处理/评测: 数据转换与模型评测优化

Co-Authored-By: Claude <noreply@anthropic.com>

backend/app/modules/storage/minio_store.py

@@ -8,6 +8,7 @@ from typing import Any
 
 from minio import Minio
 from minio.error import S3Error
+import urllib3
 
 from app.core.config import get_settings
 
@@ -20,7 +21,20 @@ class MinioObjectStorage:
     def __init__(self) -> None:
         settings = get_settings()
         endpoint = settings.minio_endpoint.replace("http://", "").replace("https://", "").rstrip("/")
-        self.client = Minio(endpoint, access_key=settings.minio_access_key, secret_key=settings.minio_secret_key, secure=settings.minio_secure)
+        # MinIO outages must fail fast; higher-level workflows own the retry
+        # policy and should not wait through urllib3's default retry chain.
+        http_client = urllib3.PoolManager(
+            cert_reqs="CERT_REQUIRED" if settings.minio_secure else "CERT_NONE",
+            timeout=urllib3.Timeout(connect=2.0, read=10.0),
+            retries=False,
+        )
+        self.client = Minio(
+            endpoint,
+            access_key=settings.minio_access_key,
+            secret_key=settings.minio_secret_key,
+            secure=settings.minio_secure,
+            http_client=http_client,
+        )
         self.bucket = settings.minio_bucket
 
     def _ensure_enabled(self) -> None:
@@ -32,7 +46,7 @@ class MinioObjectStorage:
         try:
             if not self.client.bucket_exists(self.bucket):
                 self.client.make_bucket(self.bucket)
-        except S3Error as exc:
+        except Exception as exc:  # noqa: BLE001 - normalize network/client failures
             raise ObjectStorageError(str(exc)) from exc
 
     def presigned_put(self, object_key: str, expires_seconds: int = 3600) -> str: