feat(backend): T1.1 认证与权限 — 注册/登录/刷新/获取用户

- 后端：auth 路由（register/login/refresh/me）+ JWT + bcrypt 密码哈希
- 依赖注入：get_current_user + require_role 角色权限校验
- 跨数据库兼容：JSONBType（PG 用 JSONB，SQLite 用 JSON）
- 测试：11 个认证测试 + 4 个健康检查测试 = 15 passed

backend/app/models/audit.py

@@ -7,10 +7,10 @@ import uuid
 from datetime import datetime, timezone
 
 from sqlalchemy import DateTime, ForeignKey, String, Text
-from sqlalchemy.dialects.postgresql import JSONB, INET
 from sqlalchemy.orm import Mapped, mapped_column
 
 from app.core.database import Base
+from app.core.types import JSONBType
 
 
 class AuditLog(Base):
@@ -24,8 +24,8 @@ class AuditLog(Base):
     action: Mapped[str] = mapped_column(String(100), nullable=False, comment="操作类型：login/view/create/update/delete/export/ai_call")
     resource_type: Mapped[str | None] = mapped_column(String(50), nullable=True, comment="资源类型")
     resource_id: Mapped[str | None] = mapped_column(String(36), nullable=True, comment="资源 ID")
-    detail_json: Mapped[dict | None] = mapped_column(JSONB, nullable=True, comment="操作详情")
-    ip: Mapped[str | None] = mapped_column(INET, nullable=True)
+    detail_json: Mapped[dict | None] = mapped_column(JSONBType, nullable=True, comment="操作详情")
+    ip: Mapped[str | None] = mapped_column(String(45), nullable=True, comment="IP 地址")
     created_at: Mapped[datetime] = mapped_column(
         DateTime(timezone=True), default=lambda: datetime.now(timezone.utc)
     )