refactor(auth): delegate access control to be-system

Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.

internal/services/conversation_human_dispatch_service_test.go

@@ -5,11 +5,11 @@ import (
 	"testing"
 	"time"
 
-	"agent-desk/internal/models"
-	"agent-desk/internal/pkg/dto"
-	"agent-desk/internal/pkg/enums"
-	"agent-desk/internal/pkg/openidentity"
-	"agent-desk/internal/services"
+	"code.tczkiot.com/wlw/ai-agent/internal/models"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/dto"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/openidentity"
+	"code.tczkiot.com/wlw/ai-agent/internal/services"
 
 	"github.com/glebarez/sqlite"
 	"github.com/mlogclub/simple/sqls"
@@ -200,7 +200,6 @@ func setupConversationHumanDispatchTestDB(t *testing.T) *gorm.DB {
 		}
 	})
 	if err := db.AutoMigrate(
-		&models.User{},
 		&models.Customer{},
 		&models.CustomerIdentity{},
 		&models.AIAgent{},
@@ -257,14 +256,7 @@ func createHumanDispatchActiveSchedule(t *testing.T, db *gorm.DB, teamID int64)
 
 func createHumanDispatchAgentProfile(t *testing.T, db *gorm.DB, userID, teamID int64, serviceStatus enums.ServiceStatus, maxConcurrent int, autoAssign bool, status enums.Status) {
 	t.Helper()
-	if err := db.Create(&models.User{
-		ID:       userID,
-		Username: "agent",
-		Nickname: "客服",
-		Status:   enums.StatusOk,
-	}).Error; err != nil {
-		t.Fatalf("create user error = %v", err)
-	}
+	registerTestExternalSubject(userID, "agent", "客服", enums.StatusOk)
 	if err := db.Create(&models.AgentProfile{
 		UserID:             userID,
 		TeamID:             teamID,