feat(shop-role): 实现店铺角色继承功能和权限检查优化

- 新增店铺角色管理 API 和数据模型
- 实现角色继承和权限检查逻辑
- 添加流程测试框架和集成测试
- 更新权限服务和账号管理逻辑
- 添加数据库迁移脚本
- 归档 OpenSpec 变更文档

Ultraworked with Sisyphus

internal/routes/admin.go

@@ -24,6 +24,9 @@ func RegisterAdminRoutes(router fiber.Router, handlers *bootstrap.Handlers, midd
 	if handlers.Shop != nil {
 		registerShopRoutes(authGroup, handlers.Shop, doc, basePath)
 	}
+	if handlers.ShopRole != nil {
+		registerShopRoleRoutes(authGroup, handlers.ShopRole, doc, basePath)
+	}
 
 	if handlers.ShopCommission != nil {
 		registerShopCommissionRoutes(authGroup, handlers.ShopCommission, doc, basePath)

internal/routes/shop.go

@@ -45,6 +45,35 @@ func registerShopRoutes(router fiber.Router, handler *admin.ShopHandler, doc *op
 	})
 }
 
+func registerShopRoleRoutes(router fiber.Router, handler *admin.ShopRoleHandler, doc *openapi.Generator, basePath string) {
+	shops := router.Group("/shops")
+	groupPath := basePath + "/shops"
+
+	Register(shops, doc, groupPath, "POST", "/:shop_id/roles", handler.AssignShopRoles, RouteSpec{
+		Summary: "分配店铺默认角色",
+		Tags:    []string{"店铺管理"},
+		Input:   new(dto.AssignShopRolesRequest),
+		Output:  new(dto.ShopRolesResponse),
+		Auth:    true,
+	})
+
+	Register(shops, doc, groupPath, "GET", "/:shop_id/roles", handler.GetShopRoles, RouteSpec{
+		Summary: "查询店铺默认角色",
+		Tags:    []string{"店铺管理"},
+		Input:   new(dto.GetShopRolesRequest),
+		Output:  new(dto.ShopRolesResponse),
+		Auth:    true,
+	})
+
+	Register(shops, doc, groupPath, "DELETE", "/:shop_id/roles/:role_id", handler.DeleteShopRole, RouteSpec{
+		Summary: "删除店铺默认角色",
+		Tags:    []string{"店铺管理"},
+		Input:   new(dto.DeleteShopRoleRequest),
+		Output:  nil,
+		Auth:    true,
+	})
+}
+
 func registerShopCommissionRoutes(router fiber.Router, handler *admin.ShopCommissionHandler, doc *openapi.Generator, basePath string) {
 	shops := router.Group("/shops")
 	groupPath := basePath + "/shops"