feat: 五项目业务实现并对接完成

- MES(B): 工单/BOM/备料/工序字典/PLC下发/拧紧/扫码报工/半成品/AGV/追溯逻辑，WMS与海康RCS客户端，看板Redis缓存API(概览/设备/进度/报警/趋势)+SSE
- WMS(C): JWT滑动续签、Excel导入、盘点、内部API、种子数据、独立Postgres配置
- WMS客户端(E): Go网关8891反向代理+内嵌Vue3十页
- 工位终端(D): SQLite本地缓存+模拟拧紧源+内嵌Vue3页面
- Dashboard(A): 看板数据改接MES内部缓存API，SSE实时刷新+vite代理
- 清理各项目球形磨遗留代码，新增部署手册.md

bj_power_workstation/internal/handler/auth.go

@@ -0,0 +1,75 @@
+package handler
+
+import (
+	"net/http"
+	"strings"
+	"time"
+
+	"bj_power_workstation/internal/auth"
+	"bj_power_workstation/internal/svc"
+
+	"golang.org/x/crypto/bcrypt"
+)
+
+func healthHandler(ctx *svc.ServiceContext) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		if err := ctx.Store.Ping(); err == nil {
+			ok(w, map[string]any{
+				"status":  "UP",
+				"time":    time.Now().Format("2006-01-02 15:04:05"),
+				"service": "bj_power_workstation",
+			})
+			return
+		}
+		fail(w, http.StatusServiceUnavailable, "本地数据库不可用")
+	}
+}
+
+// loginHandler 本地 SQLite + bcrypt 校验登录，返回 {token, expireAt, user}。
+func loginHandler(ctx *svc.ServiceContext) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		var req struct {
+			Username string `json:"username"`
+			Password string `json:"password"`
+		}
+		if err := parseJSON(r, &req); err != nil {
+			fail(w, http.StatusBadRequest, "参数错误")
+			return
+		}
+		if strings.TrimSpace(req.Username) == "" || req.Password == "" {
+			fail(w, http.StatusBadRequest, "用户名和密码必填")
+			return
+		}
+
+		u, err := ctx.Store.GetUserByUsername(strings.TrimSpace(req.Username))
+		if err != nil {
+			fail(w, http.StatusUnauthorized, "用户名或密码错误")
+			return
+		}
+		if bcrypt.CompareHashAndPassword([]byte(u.PasswordHash), []byte(req.Password)) != nil {
+			fail(w, http.StatusUnauthorized, "用户名或密码错误")
+			return
+		}
+
+		token, expireAt, err := auth.SignToken(
+			ctx.Config.Auth.AccessSecret,
+			ctx.Config.Auth.AccessExpire,
+			auth.TokenInfo{UserID: u.ID, Username: u.Username, RealName: u.RealName, Role: u.Role},
+		)
+		if err != nil {
+			fail(w, http.StatusInternalServerError, "签发 token 失败")
+			return
+		}
+
+		ok(w, map[string]any{
+			"token":    token,
+			"expireAt": expireAt,
+			"user": map[string]any{
+				"id":       u.ID,
+				"username": u.Username,
+				"realName": u.RealName,
+				"role":     u.Role,
+			},
+		})
+	}
+}