feat: 提交后端其余改动

src/Application/TakeoutSaaS.Application/Identity/Services/AdminAuthService.cs

@@ -422,6 +422,12 @@ public sealed class AdminAuthService(
 
                 // 1.3 可见性
                 var required = node.RequiredPermissions ?? [];
+                if (required.Length == 0 && node.Meta.Permissions.Length > 0)
+                {
+                    // Fall back to meta permissions when explicit required permissions are missing.
+                    required = node.Meta.Permissions;
+                }
+
                 var visible = required.Length == 0 || required.Any(permissionSet.Contains);
 
                 // 1.4 收集