refactor: full-stack restructure with multi-tenancy, workspace management, and K8s diagnostics

- Add Workspace domain (entity, repository, service, handler, DTO)
- Add multi-tenant K8s client with tenant binding and quota management
- Add K8s diagnostics client (instance diagnostics)
- Add authorization middleware (authz package)
- Restructure frontend to feature-based architecture (features/)
- Add User Management page in configuration
- Add AccessDenied page and route guards
- Refactor shared components (form inputs, layout, UI)
- Update Tailwind config for new design system
- Add comprehensive documentation (docs/, tasks/, plans)
- Improve cluster service with better kubeconfig handling
- Add tests for crypto, config, helm client, tenant binding

backend/internal/adapter/input/http/rest/registry_handler.go

@@ -44,6 +44,10 @@ func (h *RegistryHandler) CreateRegistry(w http.ResponseWriter, r *http.Request)
 	registry := entity.NewRegistry(req.Name, req.URL)
 	registry.Description = req.Description
 	registry.Insecure = req.Insecure
+	registry.Visibility = req.Visibility
+	if req.GlobalShared || req.GlobalSharedAlt {
+		registry.Visibility = "global_shared"
+	}
 	registry.SetCredentials(req.Username, req.Password)
 
 	// 调用领域服务
@@ -136,6 +140,12 @@ func (h *RegistryHandler) UpdateRegistry(w http.ResponseWriter, r *http.Request)
 	// 更新字段
 	registry.Update(req.Name, req.URL, req.Description)
 	registry.Insecure = req.Insecure
+	if req.Visibility != "" {
+		registry.Visibility = req.Visibility
+	}
+	if req.GlobalShared || req.GlobalSharedAlt {
+		registry.Visibility = "global_shared"
+	}
 	if req.Username != "" || req.Password != "" {
 		registry.SetCredentials(req.Username, req.Password)
 	}