feat: 设计菜单权限和员工端登录

src/app.ts

@@ -7,6 +7,7 @@ import { authRoutes } from "./modules/auth/auth.controller";
 import { managementGuard } from "./modules/auth/auth.guard";
 import { catalogRoutes } from "./modules/catalog/catalog.controller";
 import { employeeRoutes } from "./modules/employees/employee.controller";
+import { permissionRoutes } from "./modules/permissions/permission.controller";
 import { HttpError } from "./shared/http-error";
 import { ok } from "./shared/response";
 
@@ -56,6 +57,7 @@ export function createApp() {
 
   // 登录接口不需要 token；/auth/me 在 authRoutes 内部单独加了 authGuard。
   app.register(authRoutes, { prefix: "/api" });
+  app.register(permissionRoutes, { prefix: "/api" });
 
   // 业务管理接口统一要求后台权限：超级管理员或拥有 admin 角色的员工。
   app.register(