fix: 优化文档16项问题修复

- 问题1/3: 绩效考核/培训记录员工姓名可点击跳转员工详情页
- 问题2: 离职证明模板支持自定义+员工端下载
- 问题4(P0): 修复工资填写后数据归零问题
- 问题5: 社保添加员工参保信息列表
- 问题6(P0): 商业保险支持为员工参保
- 问题7(P0): 员工福利支持为员工添加福利
- 问题8: 规章制度支持导入Word文档
- 问题9: 文本模板下载Word增加HTML格式
- 问题10: 模板下载变量替换修复(排除token参数)
- 问题11(P0): 电子签署发起时员工下拉框有选项
- 问题12: 新增绩效记录添加考评人选项
- 问题13: 违纪记录添加处罚执行细节
- 问题14: 特殊员工列表添加查看详情按钮和姓名链接
- 问题15: 员工福利汇总正确显示参保人员
- 问题16(P0): 证据链验证修复(递归排序key+自动修复历史哈希)

frontend/src/pages/Templates.tsx

@@ -142,25 +142,21 @@ function SystemTemplates() {
     toast.success('已复制到剪贴板')
   }
 
-  const handleDownloadWord = async () => {
+  const handleDownloadWord = () => {
     if (!selected) return
-    try {
-      const token = useAuthStore.getState().accessToken
-      const baseURL = import.meta.env.DEV ? 'http://localhost:3000/api/v1' : '/api/v1'
-      const res = await fetch(`${baseURL}/templates/${selected.id}/download`, {
-        headers: token ? { Authorization: `Bearer ${token}` } : {},
-      })
-      const blob = await res.blob()
-      const url = URL.createObjectURL(blob)
-      const a = document.createElement('a')
-      a.href = url
-      a.download = `${selected.name}.doc`
-      a.click()
-      URL.revokeObjectURL(url)
-      toast.success('已下载 Word 文档')
-    } catch {
-      toast.error('下载失败')
+    const token = useAuthStore.getState().accessToken
+    const baseURL = import.meta.env.DEV ? 'http://localhost:3000/api/v1' : '/api/v1'
+    const query = new URLSearchParams()
+    query.set('token', token || '')
+    for (const [k, v] of Object.entries(variables)) {
+      if (v) query.append(k, v)
     }
+    const a = document.createElement('a')
+    a.href = `${baseURL}/templates/${selected.id}/download?${query.toString()}`
+    a.style.display = 'none'
+    document.body.appendChild(a)
+    a.click()
+    document.body.removeChild(a)
   }
 
   const handleCopyAsNew = () => {
@@ -373,25 +369,21 @@ function EnterpriseTemplates() {
     }
   }
 
-  const handleDownloadWord = async () => {
+  const handleDownloadWord = () => {
     if (!selected) return
-    try {
-      const token = useAuthStore.getState().accessToken
-      const baseURL = import.meta.env.DEV ? 'http://localhost:3000/api/v1' : '/api/v1'
-      const res = await fetch(`${baseURL}/enterprise-templates/${selected.id}/download`, {
-        headers: token ? { Authorization: `Bearer ${token}` } : {},
-      })
-      const blob = await res.blob()
-      const url = URL.createObjectURL(blob)
-      const a = document.createElement('a')
-      a.href = url
-      a.download = `${selected.name}.doc`
-      a.click()
-      URL.revokeObjectURL(url)
-      toast.success('已下载')
-    } catch {
-      toast.error('下载失败')
+    const token = useAuthStore.getState().accessToken
+    const baseURL = import.meta.env.DEV ? 'http://localhost:3000/api/v1' : '/api/v1'
+    const query = new URLSearchParams()
+    query.set('token', token || '')
+    for (const [k, v] of Object.entries(variables)) {
+      if (v) query.append(k, v)
     }
+    const a = document.createElement('a')
+    a.href = `${baseURL}/enterprise-templates/${selected.id}/download?${query.toString()}`
+    a.style.display = 'none'
+    document.body.appendChild(a)
+    a.click()
+    document.body.removeChild(a)
   }
 
   const handleEdit = (item: any) => {