fix: 风险中心页面无数据

- 后端缺少 /compliance/risks 路由，新增 /dashboard/risks 端点返回PENDING风险项
- 前端API调用从 /compliance/risks 改为 /dashboard/risks
- RISK_TYPES 配置key从虚构子类型改为实际Prisma RiskType枚举值
- 风险列表字段映射修正: r.message→r.title, r.employeeName→r.employee.name

backend/src/routes/dashboard.routes.ts

@@ -489,4 +489,18 @@ router.get('/performance-stats', authMiddleware, async (req: AuthRequest, res: R
   }
 })
 
+// 风险中心 — 获取所有待处理风险项
+router.get('/risks', authMiddleware, async (req: AuthRequest, res: Response, next: NextFunction) => {
+  try {
+    const risks = await prisma.riskItem.findMany({
+      where: { orgId: req.user!.orgId, status: 'PENDING' },
+      include: { employee: { select: { name: true, department: true } } },
+      orderBy: [{ level: 'desc' }, { createdAt: 'desc' }],
+    })
+    res.json({ success: true, data: risks })
+  } catch (err) {
+    next(err)
+  }
+})
+
 export default router