feat: 工单权限过滤+仪表盘优化+LDAP登录+审批流程+待处理工单

后端:
- ticket_statistics/list_tickets 按用户身份过滤(admin全部, dba/auditor审批相关, developer自己的)
- 新增 /dashboard/my-tickets 接口(按角色返回待处理工单)
- auth.py 本地优先+LDAP fallback 登录认证
- ldap_config.py LDAPS 证书验证修复
- instance_detail.py developer/auditor 权限修复

前端:
- Dashboard 仪表盘: 3核心大数字指标+公告+我的待处理工单
- 删除 ECharts 趋势图(无真实数据)
- TicketDetailPage 审批流程时间线展示
- TicketsPage 工单统计按用户过滤+关联列(我提交的/待我审批)
- types 新增 TicketApproval 等类型定义

backend/app/api/v1/endpoints/ldap_config.py

@@ -120,9 +120,13 @@ async def test_ldap_connection(
         conn.set_option(_ldap.OPT_NETWORK_TIMEOUT, 10)
         conn.simple_bind_s(ldap.admin_dn, decrypt_password(ldap.admin_password))
 
-        # Search user
-        search_filter = ldap.search_filter or "(uid=%s)"
-        user_filter = search_filter.replace("%s", data.test_user)
+        # Search user — always filter by uid to avoid matching wrong user
+        base_filter = ldap.search_filter or "(objectClass=inetOrgPerson)"
+        if "%s" in base_filter:
+            user_filter = base_filter.replace("%s", data.test_user)
+        else:
+            # search_filter has no placeholder, append uid condition
+            user_filter = f"(&{base_filter}(uid={data.test_user}))"
         results = conn.search_s(
             ldap.base_dn,
             _ldap.SCOPE_SUBTREE,