feat(rbac): add permission-aware administration UI

[yardbirds0]

Summary

• consume the backend RBAC permission catalog and current-user effective scope
• make routes, menus, and actions permission-aware while keeping backend enforcement authoritative
• add functional role CRUD with a controlled permission tree
• add user-role assignment with explicit global or selected-device-group scope
• keep device-group structure and role administration super-admin only
• scope strategy target discovery and hide unavailable target modes
• preserve existing personal/shared address-book ACL behavior

Depends on databk/rustdesk-console#310.

Verification

• npm run lint
• npm test -- --runInBand (4 suites, 11 tests)
• npm run build
• git diff --cached --check