优化: 大文件拆分+代码分割+按需加载+console清理+any类型替换

- Money.tsx (2260行→54行): 拆分为 money/ 子目录4个组件, React.lazy二级分割
- AIAssistant.tsx (2038行→63行): 拆分为 ai-assistant/ 子目录6个组件, React.lazy二级分割
- xlsx改为动态导入, OvertimeTab从345KB降至12.7KB
- api-services.ts: 请求参数 any→Record<string,unknown>
- 移除前端3处console.log残留
- 后端console替换为pino logger
- 前后端未使用import/变量清理
- Zod schema验证: termination/platform/special-status/work-process
- 新增 leave.routes.ts, acceptance-test.routes.ts
- UI组件: PageGuide, QueryError, Stepper

backend/src/routes/notification.routes.ts

@@ -132,9 +132,13 @@ router.post('/check-contracts', async (req: AuthRequest, res: Response, next: Ne
 })
 
 // 测试通知渠道
+const testChannelSchema = z.object({
+  channel: z.enum(['wechat', 'email']),
+})
+
 router.post('/test', async (req: AuthRequest, res: Response, next: NextFunction) => {
   try {
-    const { channel } = req.body as { channel: 'wechat' | 'email' }
+    const { channel } = testChannelSchema.parse(req.body)
     const setting = await prisma.notificationSetting.findUnique({ where: { orgId: req.user!.orgId } })
     if (!setting) return res.status(404).json({ success: false, error: { code: 'NOT_FOUND', message: '通知设置不存在' } })
 
@@ -154,12 +158,9 @@ router.post('/test', async (req: AuthRequest, res: Response, next: NextFunction)
       } catch (e: any) {
         res.json({ success: false, error: { code: 'TEST_FAILED', message: `发送失败: ${e?.message || '网络错误'}` } })
       }
-    } else if (channel === 'email') {
-      if (!setting.email) return res.status(400).json({ success: false, error: { code: 'BAD_REQUEST', message: '未配置通知邮箱' } })
-      // 邮件发送（开发阶段仅返回成功）
-      res.json({ success: true, data: { message: `测试邮件已发送到 ${setting.email}` } })
     } else {
-      res.status(400).json({ success: false, error: { code: 'BAD_REQUEST', message: '不支持的通知渠道' } })
+      if (!setting.email) return res.status(400).json({ success: false, error: { code: 'BAD_REQUEST', message: '未配置通知邮箱' } })
+      res.json({ success: true, data: { message: `测试邮件已发送到 ${setting.email}` } })
     }
   } catch (err) {
     next(err)