refactor: 移除未使用的 user_permission 表及权限加载逻辑

- 删除 UserPermission 模型与 xorm Sync2 注册
- 移除登录/鉴权时从 user_permission 加载授权的逻辑
- 应用列表查询去掉 user_permission 子查询，仅保留负责人和业务组条件
- SQL 导出文件删除建表语句，新增 drop_user_permission.sql 升级脚本

server/internal/service/auth.go

@@ -148,34 +148,6 @@ func (s *AuthService) loadPermissions(userInfo *model.LoginUserInfo, userId int)
 		userInfo.GrantAppIds = append(userInfo.GrantAppIds, app.Id)
 		userInfo.GrantPermissons = append(userInfo.GrantPermissons, buildPermissionCode(app.Id, "RW"))
 	}
-
-	// load granted permissions
-	var perms []model.UserPermission
-	dao.Engine.Where("user_id = ?", userId).Find(&perms)
-	for _, p := range perms {
-		permCode := buildPermissionCode(p.AppId, p.Operate)
-		// avoid duplicate
-		found := false
-		for _, existing := range userInfo.GrantPermissons {
-			if existing == permCode {
-				found = true
-				break
-			}
-		}
-		if !found {
-			userInfo.GrantPermissons = append(userInfo.GrantPermissons, permCode)
-		}
-		appIdFound := false
-		for _, id := range userInfo.GrantAppIds {
-			if id == p.AppId {
-				appIdFound = true
-				break
-			}
-		}
-		if !appIdFound {
-			userInfo.GrantAppIds = append(userInfo.GrantAppIds, p.AppId)
-		}
-	}
 }
 
 func buildPermissionCode(appId int, operate string) string {