feat: 审核规则模版+设置页面整合+去掉角色切换demo

后端:
- AuditRule 新增 value 字段, rule_type 扩展 DDL/DML
- MySQL/PG/Redis 预设规则种子接口 POST /audit-rules/seed/{db_type}
- 公告管理 CRUD (announcements)
- 消息推送 CRUD+测试 (notifications: 钉钉/飞书/邮件)
- LDAP 配置 CRUD+测试连接 (ldap-config)
- 164 tests passing (+31 新增)

前端:
- AuditRulesPage 重写: DB类型Tab+DDL/DML分组+参数编辑
- SettingsPage: 系统设置主页(审核规则/公告/推送/LDAP)
- NotificationPage: 钉钉/飞书/SMTP配置
- LdapConfigPage: LDAP设置+测试连接
- AnnouncementPage: 公告Markdown编辑
- 去掉左下角角色切换demo
- 侧边栏合并为: 系统设置(含审核规则+公告+推送+LDAP)

backend/app/schemas/announcement.py

@@ -0,0 +1,27 @@
+from datetime import datetime
+from typing import Optional
+from pydantic import BaseModel, Field
+
+
+class AnnouncementCreate(BaseModel):
+    title: str = Field(..., min_length=1, max_length=200)
+    content: str = Field(..., min_length=1)
+
+
+class AnnouncementUpdate(BaseModel):
+    title: Optional[str] = Field(default=None, min_length=1, max_length=200)
+    content: Optional[str] = None
+    is_published: Optional[bool] = None
+
+
+class AnnouncementResponse(BaseModel):
+    id: int
+    title: str
+    content: str
+    is_published: bool
+    published_at: Optional[datetime] = None
+    created_at: datetime
+    updated_at: datetime
+
+    class Config:
+        from_attributes = True

backend/app/schemas/audit_rule.py

@@ -6,10 +6,11 @@ from typing import Optional, Literal
 class AuditRuleCreate(BaseModel):
     name: str = Field(..., min_length=1, max_length=100)
     description: Optional[str] = None
-    rule_type: Literal["syntax", "performance", "safety", "naming"]
+    rule_type: Literal["syntax", "performance", "safety", "naming", "DDL", "DML"]
     severity: Literal["error", "warning", "info"] = "warning"
     db_type: str = "mysql"
     pattern: Optional[str] = None
+    value: Optional[str] = Field(default=None, max_length=255)
     is_enabled: bool = True
     message: str = Field(..., min_length=1, max_length=500)
 
@@ -17,10 +18,11 @@ class AuditRuleCreate(BaseModel):
 class AuditRuleUpdate(BaseModel):
     name: Optional[str] = Field(default=None, min_length=1, max_length=100)
     description: Optional[str] = None
-    rule_type: Optional[Literal["syntax", "performance", "safety", "naming"]] = None
+    rule_type: Optional[Literal["syntax", "performance", "safety", "naming", "DDL", "DML"]] = None
     severity: Optional[Literal["error", "warning", "info"]] = None
     db_type: Optional[str] = None
     pattern: Optional[str] = None
+    value: Optional[str] = Field(default=None, max_length=255)
     is_enabled: Optional[bool] = None
     message: Optional[str] = Field(default=None, min_length=1, max_length=500)
 
@@ -33,6 +35,7 @@ class AuditRuleResponse(BaseModel):
     severity: str
     db_type: str
     pattern: Optional[str] = None
+    value: Optional[str] = None
     is_enabled: bool
     message: str
     created_at: datetime

backend/app/schemas/ldap_config.py

@@ -0,0 +1,47 @@
+from datetime import datetime
+from typing import Optional, Dict, Any
+from pydantic import BaseModel, Field
+
+
+class LdapConfigCreate(BaseModel):
+    ldap_host: str = Field(..., min_length=1, max_length=200)
+    ldap_port: int = Field(default=389, ge=1, le=65535)
+    use_ldaps: bool = False
+    admin_dn: str = Field(..., min_length=1, max_length=500)
+    admin_password: str = Field(..., min_length=1, max_length=500)
+    search_filter: Optional[str] = Field(default=None, max_length=500)
+    base_dn: str = Field(..., min_length=1, max_length=500)
+    user_mapping: Optional[Dict[str, Any]] = None
+
+
+class LdapConfigUpdate(BaseModel):
+    ldap_host: Optional[str] = Field(default=None, min_length=1, max_length=200)
+    ldap_port: Optional[int] = Field(default=None, ge=1, le=65535)
+    use_ldaps: Optional[bool] = None
+    admin_dn: Optional[str] = Field(default=None, min_length=1, max_length=500)
+    admin_password: Optional[str] = Field(default=None, min_length=1, max_length=500)
+    search_filter: Optional[str] = Field(default=None, max_length=500)
+    base_dn: Optional[str] = Field(default=None, min_length=1, max_length=500)
+    user_mapping: Optional[Dict[str, Any]] = None
+
+
+class LdapConfigResponse(BaseModel):
+    id: int
+    ldap_host: str
+    ldap_port: int
+    use_ldaps: bool
+    admin_dn: str
+    admin_password: str  # masked in endpoint
+    search_filter: Optional[str] = None
+    base_dn: str
+    user_mapping: Optional[Dict[str, Any]] = None
+    created_at: datetime
+    updated_at: datetime
+
+    class Config:
+        from_attributes = True
+
+
+class LdapTestRequest(BaseModel):
+    test_user: str = Field(..., min_length=1)
+    test_password: str = Field(..., min_length=1)

backend/app/schemas/notification.py

@@ -0,0 +1,30 @@
+from datetime import datetime
+from typing import Optional, Dict, Any
+from pydantic import BaseModel, Field
+
+
+class NotificationChannelCreate(BaseModel):
+    name: str = Field(..., min_length=1, max_length=100)
+    channel_type: str = Field(..., pattern=r"^(dingtalk|webhook_feishu|email)$")
+    config: Dict[str, Any]
+    is_enabled: bool = True
+
+
+class NotificationChannelUpdate(BaseModel):
+    name: Optional[str] = Field(default=None, min_length=1, max_length=100)
+    channel_type: Optional[str] = Field(default=None, pattern=r"^(dingtalk|webhook_feishu|email)$")
+    config: Optional[Dict[str, Any]] = None
+    is_enabled: Optional[bool] = None
+
+
+class NotificationChannelResponse(BaseModel):
+    id: int
+    name: str
+    channel_type: str
+    config: Dict[str, Any]  # passwords masked in endpoint
+    is_enabled: bool
+    created_at: datetime
+    updated_at: datetime
+
+    class Config:
+        from_attributes = True