refactor: 数据权限过滤从 GORM Callback 改为 Store 层显式调用

- 移除 RegisterDataPermissionCallback 和 SkipDataPermission 机制
- 在 Auth 中间件预计算 SubordinateShopIDs 并注入 Context
- 新增 ApplyShopFilter/ApplyEnterpriseFilter/ApplyOwnerShopFilter 等 Helper 函数
- 所有 Store 层查询方法显式调用数据权限过滤函数
- 权限检查函数 CanManageShop/CanManageEnterprise 改为从 Context 获取数据

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

internal/task/commission_calculation.go

@@ -9,7 +9,6 @@ import (
 	"gorm.io/gorm"
 
 	"github.com/break/junhong_cmp_fiber/internal/service/commission_calculation"
-	pkggorm "github.com/break/junhong_cmp_fiber/pkg/gorm"
 )
 
 const (
@@ -39,8 +38,6 @@ func NewCommissionCalculationHandler(
 }
 
 func (h *CommissionCalculationHandler) HandleCommissionCalculation(ctx context.Context, task *asynq.Task) error {
-	ctx = pkggorm.SkipDataPermission(ctx)
-
 	var payload CommissionCalculationPayload
 	if err := sonic.Unmarshal(task.Payload(), &payload); err != nil {
 		h.logger.Error("解析佣金计算任务载荷失败",

internal/task/commission_stats_archive.go

@@ -12,7 +12,6 @@ import (
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/internal/store/postgres"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
-	pkggorm "github.com/break/junhong_cmp_fiber/pkg/gorm"
 )
 
 type CommissionStatsArchiveHandler struct {
@@ -37,8 +36,6 @@ func NewCommissionStatsArchiveHandler(
 }
 
 func (h *CommissionStatsArchiveHandler) HandleCommissionStatsArchive(ctx context.Context, task *asynq.Task) error {
-	ctx = pkggorm.SkipDataPermission(ctx)
-
 	now := time.Now()
 	lastMonthStart := now.AddDate(0, -1, 0)
 	lastMonthStart = time.Date(lastMonthStart.Year(), lastMonthStart.Month(), 1, 0, 0, 0, 0, time.UTC)

internal/task/commission_stats_sync.go

@@ -14,7 +14,6 @@ import (
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/internal/store/postgres"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
-	pkggorm "github.com/break/junhong_cmp_fiber/pkg/gorm"
 )
 
 type CommissionStatsSyncHandler struct {
@@ -39,8 +38,6 @@ func NewCommissionStatsSyncHandler(
 }
 
 func (h *CommissionStatsSyncHandler) HandleCommissionStatsSync(ctx context.Context, task *asynq.Task) error {
-	ctx = pkggorm.SkipDataPermission(ctx)
-
 	lockKey := constants.RedisCommissionStatsLockKey()
 	locked, err := h.redis.SetNX(ctx, lockKey, "1", 5*time.Minute).Result()
 	if err != nil {

internal/task/commission_stats_update.go

@@ -11,7 +11,6 @@ import (
 
 	"github.com/break/junhong_cmp_fiber/internal/store/postgres"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
-	pkggorm "github.com/break/junhong_cmp_fiber/pkg/gorm"
 )
 
 type CommissionStatsUpdatePayload struct {
@@ -42,8 +41,6 @@ func NewCommissionStatsUpdateHandler(
 }
 
 func (h *CommissionStatsUpdateHandler) HandleCommissionStatsUpdate(ctx context.Context, task *asynq.Task) error {
-	ctx = pkggorm.SkipDataPermission(ctx)
-
 	var payload CommissionStatsUpdatePayload
 	if err := sonic.Unmarshal(task.Payload(), &payload); err != nil {
 		h.logger.Error("解析统计更新任务载荷失败",

internal/task/device_import.go

@@ -17,7 +17,6 @@ import (
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/internal/store/postgres"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
-	pkggorm "github.com/break/junhong_cmp_fiber/pkg/gorm"
 	"github.com/break/junhong_cmp_fiber/pkg/storage"
 	"github.com/break/junhong_cmp_fiber/pkg/utils"
 )
@@ -62,8 +61,6 @@ func NewDeviceImportHandler(
 }
 
 func (h *DeviceImportHandler) HandleDeviceImport(ctx context.Context, task *asynq.Task) error {
-	ctx = pkggorm.SkipDataPermission(ctx)
-
 	var payload DeviceImportPayload
 	if err := sonic.Unmarshal(task.Payload(), &payload); err != nil {
 		h.logger.Error("解析设备导入任务载荷失败",

internal/task/iot_card_import.go

@@ -17,7 +17,6 @@ import (
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/internal/store/postgres"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
-	pkggorm "github.com/break/junhong_cmp_fiber/pkg/gorm"
 	"github.com/break/junhong_cmp_fiber/pkg/storage"
 	"github.com/break/junhong_cmp_fiber/pkg/utils"
 	"github.com/break/junhong_cmp_fiber/pkg/validator"
@@ -72,8 +71,6 @@ func NewIotCardImportHandler(
 }
 
 func (h *IotCardImportHandler) HandleIotCardImport(ctx context.Context, task *asynq.Task) error {
-	ctx = pkggorm.SkipDataPermission(ctx)
-
 	var payload IotCardImportPayload
 	if err := sonic.Unmarshal(task.Payload(), &payload); err != nil {
 		h.logger.Error("解析 IoT 卡导入任务载荷失败",