feat: 实现企业卡授权和授权记录管理功能

主要功能:
- 添加企业卡授权/回收接口 (POST /enterprises/:id/allocate-cards, recall-cards)
- 添加授权记录管理接口 (GET/PUT /authorizations)
- 实现代理用户数据权限过滤（只能查看自己店铺下企业的授权记录）
- 添加 GORM callback 支持授权记录表的数据权限过滤

技术改进:
- 原生 SQL 查询手动添加数据权限过滤（ListWithJoin, GetByIDWithJoin）
- 移除卡授权预检接口（allocate-cards/preview），保留内部方法
- 完善单元测试和集成测试覆盖

internal/routes/admin.go

@@ -46,6 +46,9 @@ func RegisterAdminRoutes(router fiber.Router, handlers *bootstrap.Handlers, midd
 	if handlers.EnterpriseCard != nil {
 		registerEnterpriseCardRoutes(authGroup, handlers.EnterpriseCard, doc, basePath)
 	}
+	if handlers.Authorization != nil {
+		registerAuthorizationRoutes(authGroup, handlers.Authorization, doc, basePath)
+	}
 	if handlers.CustomerAccount != nil {
 		registerCustomerAccountRoutes(authGroup, handlers.CustomerAccount, doc, basePath)
 	}

internal/routes/authorization.go

@@ -0,0 +1,38 @@
+package routes
+
+import (
+	"github.com/gofiber/fiber/v2"
+
+	"github.com/break/junhong_cmp_fiber/internal/handler/admin"
+	"github.com/break/junhong_cmp_fiber/internal/model/dto"
+	"github.com/break/junhong_cmp_fiber/pkg/openapi"
+)
+
+func registerAuthorizationRoutes(router fiber.Router, handler *admin.AuthorizationHandler, doc *openapi.Generator, basePath string) {
+	authorizations := router.Group("/authorizations")
+	groupPath := basePath + "/authorizations"
+
+	Register(authorizations, doc, groupPath, "GET", "", handler.List, RouteSpec{
+		Summary: "授权记录列表",
+		Tags:    []string{"授权记录管理"},
+		Input:   new(dto.AuthorizationListReq),
+		Output:  new(dto.AuthorizationListResp),
+		Auth:    true,
+	})
+
+	Register(authorizations, doc, groupPath, "GET", "/:id", handler.GetDetail, RouteSpec{
+		Summary: "授权记录详情",
+		Tags:    []string{"授权记录管理"},
+		Input:   new(dto.AuthorizationDetailReq),
+		Output:  new(dto.AuthorizationItem),
+		Auth:    true,
+	})
+
+	Register(authorizations, doc, groupPath, "PUT", "/:id/remark", handler.UpdateRemark, RouteSpec{
+		Summary: "修改授权备注",
+		Tags:    []string{"授权记录管理"},
+		Input:   new(dto.UpdateAuthorizationRemarkReq),
+		Output:  new(dto.AuthorizationItem),
+		Auth:    true,
+	})
+}

internal/routes/enterprise_card.go

@@ -12,14 +12,6 @@ func registerEnterpriseCardRoutes(router fiber.Router, handler *admin.Enterprise
 	enterprises := router.Group("/enterprises")
 	groupPath := basePath + "/enterprises"
 
-	Register(enterprises, doc, groupPath, "POST", "/:id/allocate-cards/preview", handler.AllocateCardsPreview, RouteSpec{
-		Summary: "卡授权预检",
-		Tags:    []string{"企业卡授权"},
-		Input:   new(dto.AllocateCardsPreviewReq),
-		Output:  new(dto.AllocateCardsPreviewResp),
-		Auth:    true,
-	})
-
 	Register(enterprises, doc, groupPath, "POST", "/:id/allocate-cards", handler.AllocateCards, RouteSpec{
 		Summary: "授权卡给企业",
 		Tags:    []string{"企业卡授权"},