feat: 发布权限 RBAC + PipelineEditor 修复 + 菜单优化

- 新增 DeployRBAC 页面: Jenkins-style Item Role 权限管理
  - 正则匹配流水线 code，实时命中预览
  - 内置用户分配面板，无需跳转系统管理
  - 支持创建/编辑/删除/启用禁用 Item Role
- 修复 PipelineEditor 成员管理 http 双解包 bug
- 修复 PipelineManager 前端 code 路由迁移(delete/trigger/stop/loadRuns)
- 新增批量删除流水线运行记录 API
- Sidebar: 应用发布下新增「发布权限」, 仓库认证→发布配置, 移除用户组
- 恢复系统管理菜单(不受发布权限改动影响)
- 后端 ItemRole CRUD handler + 正则匹配中间件已就绪

frontend/src/components/layout/Sidebar.tsx

@@ -3,12 +3,12 @@ import { NavLink, useLocation } from 'react-router-dom';
 import { cn } from '@/lib/utils';
 import { useThemeStore, useMenuStore } from '@/store';
 import {
-  LayoutDashboard, Server, Cloud, Rocket, Bell, Monitor,
+  LayoutDashboard, Server, Cloud, Bell, Monitor,
   CheckSquare, PlayCircle, Settings, ChevronDown, ChevronRight,
   Terminal, Cpu, Database, FileCode, Shield, Users,
   Menu, Network, CloudCog, Globe, MapPin, Key,
   Brain, FileTerminal, Activity, BarChart3, GitBranch,
-  Bot, AlertTriangle, Container, Boxes, Clock,
+  Bot, AlertTriangle, Container, Boxes, Clock, Rocket,
 } from 'lucide-react';
 import { Button } from '@/components/ui/button';
 import { ScrollArea } from '@/components/ui/scroll-area';
@@ -73,8 +73,9 @@ const menuItems: MenuItem[] = [
   {
     id: 'deploy', name: '应用发布', icon: Rocket,
     children: [
-      { id: 'pipelines', name: '流水线管理', icon: GitBranch, path: '/pipelines' },
-      { id: 'releases', name: '发布管理', icon: Rocket, path: '/releases' },
+      { id: 'pipelines', name: '流水线', icon: GitBranch, path: '/pipelines' },
+      { id: 'deploy-credentials', name: '发布配置', icon: Key, path: '/deploy/credentials' },
+      { id: 'deploy-rbac', name: '发布权限', icon: Shield, path: '/deploy/rbac' },
     ],
   },
   {