refactor: full-stack restructure with multi-tenancy, workspace management, and K8s diagnostics

- Add Workspace domain (entity, repository, service, handler, DTO)
- Add multi-tenant K8s client with tenant binding and quota management
- Add K8s diagnostics client (instance diagnostics)
- Add authorization middleware (authz package)
- Restructure frontend to feature-based architecture (features/)
- Add User Management page in configuration
- Add AccessDenied page and route guards
- Refactor shared components (form inputs, layout, UI)
- Update Tailwind config for new design system
- Add comprehensive documentation (docs/, tasks/, plans)
- Improve cluster service with better kubeconfig handling
- Add tests for crypto, config, helm client, tenant binding

tasks/session-notes.md

@@ -0,0 +1,30 @@
+# OCDP 系统测试 - 完成报告
+
+## 已交付文档
+
+| 文档 | 路径 | 大小 |
+|------|------|------|
+| 用户操作指南 | `docs/user-guide.md` | 752 lines |
+| 测试场景设计 | `docs/test-scenarios.md` | 67KB, 12 分类, 100+ 用例 |
+| 测试用户凭据 | `docs/test-users.json` | 4 个账号 |
+| 综合 Bug 报告 | `docs/bug-report.md` | 18 个 Bug, 含安全发现 |
+| user-a 测试报告 | `docs/bugs-user-a.md` | 前端 UI 发现 |
+| user-b 测试报告 | `docs/bugs-user-b.md` | API/部署发现 |
+| user-c 测试报告 | `docs/bugs-user-c.md` | 权限隔离发现 |
+| 安全测试报告 | `docs/security/bugs-security.md` | 6 个安全发现 |
+
+## Bug 统计: 18 个
+
+| 严重度 | 数量 | 说明 |
+|--------|------|------|
+| **P0 (Blocker)** | 2 | Launch 按钮无反应、SPA 路由空白页 |
+| **P1 (High)** | 2 | DELETE 404 + 空 body |
+| **P2 (Medium)** | 6 | 缺失 API、静默 namespace 覆盖、无障碍问题 |
+| **P3 (Low)** | 8 | 响应格式、安全头缺失、CORS、用户枚举等 |
+| **Total** | **18** | |
+
+## 测试团队
+- user-a-agent ✅ (前端测试)
+- user-b-agent ✅ (API/部署测试)
+- user-c-agent ✅ (权限隔离测试)
+- security-agent ✅ (安全测试)