fix: 收口管理端页面权限与工作流运行授权

- 页面选项接口改用所属页面权限并返回最小数据视图

- 统一校验工作流引用、租户、状态与定时任务执行主体

- 补充聊天记录权限迁移和权限隔离回归测试

easyflow-starter/easyflow-starter-all/src/main/resources/db/migration/mysql/V53__mysql_chat_history_query_permission.sql

@@ -0,0 +1,27 @@
+SET NAMES utf8mb4;
+
+INSERT INTO `tb_sys_menu` (
+  `id`, `parent_id`, `menu_type`, `menu_title`, `menu_url`, `component`, `menu_icon`,
+  `is_show`, `permission_tag`, `sort_no`, `status`, `created`, `created_by`, `modified`, `modified_by`, `remark`
+)
+VALUES (
+  399900000000000001, 366200000000000003, 1, '查询', '', '', '',
+  0, '/api/v1/chatHistory/query', 1, 0, NOW(), 1, NOW(), 1, '聊天历史查询权限'
+);
+
+INSERT INTO `tb_sys_role_menu` (`id`, `role_id`, `menu_id`)
+SELECT
+  399900000000000100 + ROW_NUMBER() OVER (ORDER BY candidate.`role_id`),
+  candidate.`role_id`,
+  399900000000000001
+FROM (
+  SELECT DISTINCT parent_grant.`role_id`
+  FROM `tb_sys_role_menu` parent_grant
+  WHERE parent_grant.`menu_id` = 366200000000000003
+) candidate
+WHERE NOT EXISTS (
+  SELECT 1
+  FROM `tb_sys_role_menu` existing_grant
+  WHERE existing_grant.`role_id` = candidate.`role_id`
+    AND existing_grant.`menu_id` = 399900000000000001
+);