feat(platform): 部署配置向导 + 地图管理，地图编辑器接入统一存取与 AI 助手

- 配置向导：登录按 deployment 画像引导平台选型（导航方式/模块/场景），未完成则路由守卫强制进入 /wizard；选型驱动菜单按需裁剪，并联动 SimpleLite 写 plugins/active-scenes.json + 透传 --scenes 选择性加载导航场景插件
- 地图管理页：服务器地图列表/使用/重命名/删除、地图合并、多地图连接管理
- 地图编辑器：项目存取改为存入地图管理统一目录（同名替换确认），支持 ?map=/?new= 进入，新增右侧可停靠 AI 助手面板
- 集成 PTL 拣选模块；新增车队分配面板（运维总览/筛选联动）
- SimpleLiteBuildSync 同步运行时依赖 DLL；重新构建前端静态资源

Co-authored-by: Cursor <cursoragent@cursor.com>

MiGu.Server/Controllers/AuthController.cs

@@ -35,7 +35,8 @@ public class AuthController : ControllerBase
         string RunMode,
         EffectivePermissions EffectivePermissions,
         string? LaunchStatus = null,
-        string? LaunchWarning = null);
+        string? LaunchWarning = null,
+        bool NeedsWizard = false);
 
     public record AuthUserDto(string Id, string Username, string DisplayName, List<string> Roles);
 
@@ -49,23 +50,29 @@ public class AuthController : ControllerBase
         AuthUserDto User,
         string Scope,
         string RunMode,
-        EffectivePermissions EffectivePermissions);
+        EffectivePermissions EffectivePermissions,
+        bool NeedsWizard = false);
 
     private const string CookieName = "simple.auth.token";
 
     private readonly RbacStore _rbac;
     private readonly JwtIssuer _jwt;
     private readonly SimpleLiteLauncher _launcher;
+    private readonly ConfigStore _config;
     private readonly ILogger<AuthController> _log;
 
-    public AuthController(RbacStore rbac, JwtIssuer jwt, SimpleLiteLauncher launcher, ILogger<AuthController> log)
+    public AuthController(RbacStore rbac, JwtIssuer jwt, SimpleLiteLauncher launcher, ConfigStore config, ILogger<AuthController> log)
     {
         _rbac = rbac;
         _jwt = jwt;
         _launcher = launcher;
+        _config = config;
         _log = log;
     }
 
+    /// <summary>是否需要进入配置向导（部署画像尚未完成）。登录 / me / switchScope 三处一致回填。</summary>
+    private bool NeedsWizard() => !_config.GetDeployment().Configured;
+
     [HttpPost("login")]
     [AllowAnonymous]
     public async Task<ActionResult<LoginResponse>> Login([FromBody] LoginRequest req)
@@ -106,7 +113,8 @@ public class AuthController : ControllerBase
         var dto = new AuthUserDto(user.Id, user.Username, user.DisplayName, roleNames);
         return Ok(new LoginResponse(token, dto, req.Scope, runMode, perm,
             LaunchStatus: launchResult?.Status,
-            LaunchWarning: launchResult?.Warning));
+            LaunchWarning: launchResult?.Warning,
+            NeedsWizard: NeedsWizard()));
     }
 
     [HttpPost("logout")]
@@ -140,7 +148,7 @@ public class AuthController : ControllerBase
 
         var (perm, roleNames, _) = BuildSession(user, scope);
         var dto = new AuthUserDto(user.Id, user.Username, user.DisplayName, roleNames);
-        return Ok(new MeResponse(dto, scope, InferRunMode(), perm));
+        return Ok(new MeResponse(dto, scope, InferRunMode(), perm, NeedsWizard()));
     }
 
     /// <summary>用同一身份切换 scope 并重发 token + perms。</summary>
@@ -166,7 +174,8 @@ public class AuthController : ControllerBase
         SetAuthCookie(token);
 
         var dto = new AuthUserDto(user.Id, user.Username, user.DisplayName, roleNames);
-        return Ok(new LoginResponse(token, dto, req.Scope, InferRunMode(), perm));
+        return Ok(new LoginResponse(token, dto, req.Scope, InferRunMode(), perm,
+            NeedsWizard: NeedsWizard()));
     }
 
     public record SwitchScopeRequest(string Scope);
@@ -180,7 +189,9 @@ public class AuthController : ControllerBase
     private (EffectivePermissions perm, List<string> roleNames, string token) BuildSession(RbacUser user, string scope)
     {
         var eff = _rbac.ComputeEffective(user, scope);
-        var perm = new EffectivePermissions(user.Id, 1, eff.Ops, eff.Widgets, eff.Pages);
+        // 按部署画像裁剪可见页：未启用的功能/模块对应的配置页从菜单隐藏（向导未完成则不裁剪）。
+        var pages = DeploymentCatalog.FilterPagesByDeployment(eff.Pages, _config.GetDeployment());
+        var perm = new EffectivePermissions(user.Id, 1, eff.Ops, eff.Widgets, pages);
         var roleNames = _rbac.RoleNamesOf(user);
         // ops claim 写入有效操作码（含可能的 "*"），供 RbacAdmin policy 判定管理权限。
         var token = _jwt.Issue(user.Id, user.Username, scope, roleNames, eff.Ops);