feat: 工单列表重设计+权限组实例过滤+通知修复

后端:
- Ticket model 新增 ticket_no 字段(格式: YYYYMMDDHHmmss+ms+seq, 如20260522160543841)
- create_ticket 自动生成工单编号(flush后生成)
- _enrich_ticket 新增 instance_name, current_approver_name 字段
- current_approver: 从 ticket_approvals 查询第一个 pending 状态的审批步骤获取审核人
- TicketResponse schema 新增 ticket_no, instance_name, current_approver_name
- 新增 /instances/accessible endpoint(按用户权限组过滤实例, 无admin bypass)
- instance_group response_model 改为 InstanceGroupDetailResponse(含readonly/write实例)
- instance_group_members 脏数据清理, 重建 group_id=2 正确数据
- notification 模板修复: \n→\n 换行, 钉钉 \n→\n\n 双换行
- test_notification endpoint 改为真正调用 NotificationSender.send()
- auditor 角色添加到 audit_rule/ticket 只读端点
- seed_data() 创建4个默认用户(admin/zhangsan/laoliu/lurenjia)
- SQLite ALTER TABLE 添加 ticket_no 列, 迁移现有6条工单数据

前端:
- TicketsPage 完全重设计: 工单编号/实例名称/提交人/当前审核人/状态/操作
- 状态映射简化: pending/reviewing/approved→审核中, success→完成, failed→失败
- 执行详情弹框: 解析 execute_result JSON 展示状态/影响行数/耗时/验证/原始输出/错误信息
- 状态流程可视化(提交→审批→通过→执行→完成)
- 快速筛选: 全部/待审批/执行中/完成/失败 (合并 pending+reviewing+approved 统计)
- TicketCreatePage: 去掉数据库类型选择器, 用 accessible(write) 过滤变更实例
- QueriesPage: 用 accessible(readonly) 过滤查询实例
- instance.ts 新增 accessible 方法
- 分页优化: 动态计算页码范围(总页>5时中间滚动)

frontend/src/components/EditInstanceDialog.tsx

@@ -34,12 +34,13 @@ interface Props {
   open: boolean;
   onClose: () => void;
   onSaved: () => void;
+  mode?: 'edit' | 'clone';
 }
 
 /* ------------------------------------------------------------------ */
 /*  Reusable Edit Instance Dialog                                      */
 /* ------------------------------------------------------------------ */
-export default function EditInstanceDialog({ instance, open, onClose, onSaved }: Props) {
+export default function EditInstanceDialog({ instance, open, onClose, onSaved, mode = 'edit' }: Props) {
   const [name, setName] = useState(instance.name);
   const [host, setHost] = useState(instance.host);
   const [port, setPort] = useState(String(instance.port));
@@ -105,19 +106,31 @@ export default function EditInstanceDialog({ instance, open, onClose, onSaved }:
         ? maskFields.filter(m => m.table && m.field)
         : undefined;
 
-      await instanceApi.update(instance.id, {
+      const payload: Record<string, unknown> = {
         name: name.trim(),
         host: host.trim(),
         port: Number(port),
         username: username.trim() || undefined,
-        password: password || undefined,
         database: database.trim() || undefined,
         env,
         access_mode: accessMode,
         workflow_id: workflowId,
         excluded_databases: parsedExcluded,
         mask_fields: parsedMask,
-      });
+      };
+      if (mode === 'clone') {
+        payload.db_type = instance.db_type;
+        if (!password) {
+          alert('克隆数据源需要重新输入密码');
+          setSubmitting(false);
+          return;
+        }
+        payload.password = password;
+        await instanceApi.create(payload);
+      } else {
+        payload.password = password || undefined;
+        await instanceApi.update(instance.id, payload);
+      }
       onSaved();
     } catch (e: unknown) {
       const msg = (e as { response?: { data?: { detail?: string } } })?.response?.data?.detail || '保存失败';
@@ -140,7 +153,7 @@ export default function EditInstanceDialog({ instance, open, onClose, onSaved }:
       >
         {/* Header */}
         <div className="flex items-center justify-between px-5 py-4">
-          <h2 className="text-base font-semibold">编辑数据源</h2>
+          <h2 className="text-base font-semibold">{mode === 'clone' ? '克隆数据源' : '编辑数据源'}</h2>
           <button onClick={onClose} className="p-1.5 rounded-lg hover:bg-[var(--dg-bg-hover)] text-[var(--dg-text-secondary)] transition-colors">
             <X className="w-4 h-4" />
           </button>
@@ -172,7 +185,7 @@ export default function EditInstanceDialog({ instance, open, onClose, onSaved }:
               <input className={inputCls} value={username} onChange={e => setUsername(e.target.value)} />
             </div>
             <div>
-              <label className={labelCls}>密码（留空不修改）</label>
+              <label className={labelCls}>{mode === 'clone' ? '密码' : '密码（留空不修改）'}</label>
               <input className={inputCls} type="password" value={password} onChange={e => setPassword(e.target.value)} placeholder="••••••" />
             </div>
           </div>
@@ -254,7 +267,7 @@ export default function EditInstanceDialog({ instance, open, onClose, onSaved }:
           <button onClick={onClose} className="px-4 py-2 text-sm text-[var(--dg-text-secondary)] hover:bg-[var(--dg-bg-hover)] rounded-lg transition-colors">取消</button>
           <button onClick={handleSubmit} disabled={submitting} className="flex items-center gap-2 px-4 py-2 text-sm font-medium text-white bg-blue-500 hover:bg-blue-600 disabled:opacity-50 rounded-lg transition-colors">
             {submitting && <Loader2 className="w-4 h-4 animate-spin" />}
-            保存
+            {mode === 'clone' ? '克隆' : '保存'}
           </button>
         </div>
       </div>