feat: complete customer service safety and handover flow

tools/seed_test_rbac.py

@@ -44,6 +44,7 @@ PERMISSIONS: tuple[tuple[int, str, str, str, str], ...] = (
     (9015, "config:review", "config", "review", "all"),
     (9016, "config:activate", "config", "activate", "all"),
     (9017, "model-endpoint:manage", "model-endpoint", "manage", "all"),
+    (9018, "handover:read", "handover", "read", "all"),
 )
 
 # 客户：业务侧自助能力（自己的会话、反馈、转人工、自己的记忆画像）。
@@ -62,7 +63,8 @@ ROLES: tuple[tuple[int, str, str], ...] = (
 USERS: tuple[tuple[int, str, str, str], ...] = (
     (9001, "T-CUST", "cust_t", "customer"),
     (9002, "T-RISK", "risk_t", "employee"),
-    (9003, "T-ADMIN", "admin_t", "employee"),
+    # 与一期环境门禁使用同一管理员编号，避免“权限已授予但门禁找不到审核人”的假失败。
+    (9003, "SYS-KNOWLEDGE-ADMIN", "knowledge_admin", "employee"),
 )
 
 GRANTS: tuple[tuple[int, tuple[int, ...]], ...] = (