feat(shop-role): 实现店铺角色继承功能和权限检查优化

- 新增店铺角色管理 API 和数据模型
- 实现角色继承和权限检查逻辑
- 添加流程测试框架和集成测试
- 更新权限服务和账号管理逻辑
- 添加数据库迁移脚本
- 归档 OpenSpec 变更文档

Ultraworked with Sisyphus

tests/unit/permission_cache_test.go

@@ -29,7 +29,7 @@ func TestPermissionCache_FirstCallMissSecondHit(t *testing.T) {
 	accountRoleStore := postgres.NewAccountRoleStore(tx, rdb)
 	rolePermStore := postgres.NewRolePermissionStore(tx, rdb)
 
-	permSvc := permission.New(permStore, accountRoleStore, rolePermStore, rdb)
+	permSvc := permission.New(permStore, accountRoleStore, rolePermStore, nil, rdb)
 
 	testUser := &model.Account{
 		Username: "testuser",
@@ -112,7 +112,7 @@ func TestPermissionCache_ExpiredAfter30Minutes(t *testing.T) {
 	accountRoleStore := postgres.NewAccountRoleStore(tx, rdb)
 	rolePermStore := postgres.NewRolePermissionStore(tx, rdb)
 
-	permSvc := permission.New(permStore, accountRoleStore, rolePermStore, rdb)
+	permSvc := permission.New(permStore, accountRoleStore, rolePermStore, nil, rdb)
 
 	testUser := &model.Account{
 		Username: "testuser2",