feat: add org admin SPA for models, roles and provider

Introduce admin-web (Skeleton/SvelteKit), Prisma models for provider connection / OrgModel / OrgRole, DB-backed runtime settings, and admin API routes so org admins can manage agent configuration end-to-end.

hub/admin-web/src/lib/constants.ts

@@ -0,0 +1,22 @@
+export interface ToolOption {
+	id: string;
+	label: string;
+	group: string;
+}
+
+export const TOOL_OPTIONS: ToolOption[] = [
+	{ id: 'read_file', label: '读取文件 (Read)', group: '文件' },
+	{ id: 'write_file', label: '写入文件 (Write)', group: '文件' },
+	{ id: 'list_files', label: '列目录 (Glob)', group: '文件' },
+	{ id: 'search_files', label: '搜索 (Grep)', group: '文件' },
+	{ id: 'bash', label: 'Bash 命令', group: 'Shell' },
+	{ id: 'cph_check', label: 'cph check', group: 'CPH' },
+	{ id: 'cph_build', label: 'cph build', group: 'CPH' },
+	{ id: 'send_file', label: '发送文件 (飞书)', group: '飞书 MCP' },
+	{ id: 'feishu_read_context', label: '读飞书上下文', group: '飞书 MCP' },
+	{ id: 'feishu_download_resource', label: '下载飞书资源', group: '飞书 MCP' },
+	{ id: 'request_approval', label: '请求审批', group: '飞书 MCP' }
+];
+
+export const ORG_ROLES = ['OWNER', 'ADMIN', 'MEMBER'] as const;
+export const PERMISSION_ROLES = ['READ', 'EDIT', 'MANAGE'] as const;