feat(filelib): 彻底删除改与条目可见性同权(ADR-0034,supersede ADR-0031 仅管理员条款)

能删进回收站(MANAGE)的人就能清空;无关者 404(D8)。二次确认与
node.purge 审计不变;BinView 彻底删除按钮对全部可见条目开放。

hub/src/database/filelib/binService.ts

@@ -169,19 +169,15 @@ export async function restoreBinEntry(deps: BinDeps, actor: FileLibActor, nodeId
 }
 
 /**
- * 彻底删除(仅网站管理员):整支硬删。子树经 pathIds 前缀枚举,
+ * 彻底删除(ADR-0034:与回收站条目同一可见性 —— 管理员或节点直连 MANAGE;
+ * 能删进回收站的人就能清空)。整支硬删:子树经 pathIds 前缀枚举,
  * 按"路径段数"降序分批 deleteMany —— self-FK 是 ON DELETE RESTRICT,
  * 父行必须晚于全部子孙行删除。
  */
 export async function purgeBinEntry(deps: BinDeps, actor: FileLibActor, nodeId: string): Promise<{ readonly removed: number }> {
-  if (!actor.isWebsiteAdmin) {
-    throw new FileLibError(404, "node_not_found", "node not found");
-  }
+  const groupIds = await deps.groupResolver.resolveMemberGroupIds(actor.userId);
   return deps.prisma.$transaction(async (tx) => {
-    const node = await tx.fileLibNode.findFirst({
-      where: { id: nodeId, organizationId: deps.organizationId, deletedAt: { not: null } },
-    });
-    if (node === null) throw new FileLibError(404, "node_not_found", "node not found");
+    const node = await requireBinEntry(tx as PrismaClient, deps, actor, groupIds, nodeId);
 
     const subtree = await tx.fileLibNode.findMany({
       where: {