Feat: 后端新增基础资料与业务管理只读汇总接口

为 Web 端改版提供名称、统计和看板数据。只新增只读查询、扩展列表与详情
返回字段；写接口、托盘状态机和幂等键规则均未改动，未新增权限标识。

- 基础资料：列表补充名称与汇总，客户详情返回现场树，托盘详情返回最近流转，
  托盘列表支持按流转阶段筛选和二维码精确匹配；新增现场、产线、隧道的上级
  资料选项接口；Excel 导入支持 preview 只校验不写入
- 发货出库：列表支持 keyword、receiptState 筛选并补充名称、托盘数、包数和
  菌种构成；详情明细补充托盘号、菌种、批次
- 首次入库：列表与详情补充名称、托盘数、托盘当前状态；新增 /summary
- 托盘退回：列表支持 keyword 并补充名称与托盘汇总，详情补充托盘号和隧道；
  新增 /summary、/site-options
- 工厂装填：列表支持 keyword 并补充托盘号、仓库、操作人；新增 /summary、
  /batches、/batches/detail
- 客户现场使用：列表支持 keyword、fifoSkipped 并补充名称和被跳过的先到托盘号；
  新增 /site-options、/site-board 以及 usage-fifo 的 /queue
- 先到先用 DAO 抽出公共候选条件与排序，建议查询生成的 SQL 与改动前一致
- 新增各汇总 DAO 的单元测试，同步更新路由权限与模型字段契约测试

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

shierfeng-fastapi-backend/tests/module_business/test_api_permission_contract.py

@@ -230,7 +230,11 @@ def _build_expected_route_permissions() -> dict[tuple[str, str], str]:
             ('/master/warehouse/{warehouse_id}/users', 'GET'): 'master:warehouse:assign',
             ('/master/warehouse/{warehouse_id}/users', 'PUT'): 'master:warehouse:assign',
             ('/master/pallet/{pallet_id}/qrcode', 'GET'): 'master:pallet:print',
+            ('/master/site/customer-options', 'GET'): 'master:site:list',
+            ('/master/line/site-options', 'GET'): 'master:line:list',
+            ('/master/tunnel/site-options', 'GET'): 'master:tunnel:list',
             ('/business/inbound/list', 'GET'): 'business:inbound:list',
+            ('/business/inbound/summary', 'GET'): 'business:inbound:list',
             ('/business/inbound/warehouse-options', 'GET'): 'business:inbound:query',
             ('/business/inbound/scan/{qr_token}', 'GET'): 'business:inbound:query',
             ('/business/inbound/{inbound_id}', 'GET'): 'business:inbound:query',
@@ -239,6 +243,9 @@ def _build_expected_route_permissions() -> dict[tuple[str, str], str]:
             ('/business/inbound/{inbound_ids}', 'DELETE'): 'business:inbound:list',
             ('/business/inbound/{inbound_id}/confirm', 'PUT'): 'business:inbound:confirm',
             ('/business/filling/list', 'GET'): 'business:filling:list',
+            ('/business/filling/summary', 'GET'): 'business:filling:list',
+            ('/business/filling/batches', 'GET'): 'business:filling:list',
+            ('/business/filling/batches/detail', 'GET'): 'business:filling:query',
             ('/business/filling/strain-options', 'GET'): 'business:filling:query',
             ('/business/filling/scan/{qr_token}', 'GET'): 'business:filling:query',
             ('/business/filling/{filling_id}', 'GET'): 'business:filling:query',
@@ -254,6 +261,7 @@ def _build_expected_route_permissions() -> dict[tuple[str, str], str]:
             ('/business/shipment-receipt/{shipment_id}/scan/{identifier}', 'GET'): 'business:shipment:receive',
             ('/business/shipment-receipt/{shipment_id}/confirm', 'PUT'): 'business:shipment:receive',
             ('/business/usage-fifo/recommendation', 'GET'): 'business:usage:query',
+            ('/business/usage-fifo/queue', 'GET'): 'business:usage:query',
             ('/business/shipment', 'POST'): 'business:shipment:add',
             ('/business/shipment', 'PUT'): 'business:shipment:edit',
             ('/business/shipment/{shipment_ids}', 'DELETE'): 'business:shipment:list',
@@ -261,11 +269,15 @@ def _build_expected_route_permissions() -> dict[tuple[str, str], str]:
             ('/business/usage/list', 'GET'): 'business:usage:list',
             ('/business/usage/line-options', 'GET'): 'business:usage:query',
             ('/business/usage/tunnel-options', 'GET'): 'business:usage:query',
+            ('/business/usage/site-options', 'GET'): 'business:usage:list',
+            ('/business/usage/site-board', 'GET'): 'business:usage:query',
             ('/business/usage/enter-tunnel', 'POST'): 'business:usage:add',
             ('/business/usage/scan/{qr_token}', 'GET'): 'business:usage:query',
             ('/business/usage/{usage_id}', 'GET'): 'business:usage:query',
             ('/business/usage', 'POST'): 'business:usage:add',
             ('/business/return/list', 'GET'): 'business:return:list',
+            ('/business/return/summary', 'GET'): 'business:return:list',
+            ('/business/return/site-options', 'GET'): 'business:return:list',
             ('/business/return/warehouse-options', 'GET'): 'business:return:query',
             ('/business/return/scan/{qr_token}', 'GET'): 'business:return:query',
             ('/business/return/{return_id}', 'GET'): 'business:return:query',
@@ -295,11 +307,18 @@ def _build_expected_route_permissions() -> dict[tuple[str, str], str]:
 
 EXPECTED_ROUTE_PERMISSIONS = _build_expected_route_permissions()
 STATIC_READS_BEFORE_DETAIL = {
+    '/master/site/{site_id}': ('/master/site/customer-options',),
+    '/master/line/{line_id}': ('/master/line/site-options',),
+    '/master/tunnel/{tunnel_id}': ('/master/tunnel/site-options',),
     '/business/inbound/{inbound_id}': (
+        '/business/inbound/summary',
         '/business/inbound/warehouse-options',
         '/business/inbound/scan/{qr_token}',
     ),
     '/business/filling/{filling_id}': (
+        '/business/filling/summary',
+        '/business/filling/batches',
+        '/business/filling/batches/detail',
         '/business/filling/strain-options',
         '/business/filling/scan/{qr_token}',
     ),
@@ -311,9 +330,13 @@ STATIC_READS_BEFORE_DETAIL = {
     '/business/usage/{usage_id}': (
         '/business/usage/line-options',
         '/business/usage/tunnel-options',
+        '/business/usage/site-options',
+        '/business/usage/site-board',
         '/business/usage/scan/{qr_token}',
     ),
     '/business/return/{return_id}': (
+        '/business/return/summary',
+        '/business/return/site-options',
         '/business/return/warehouse-options',
         '/business/return/scan/{qr_token}',
     ),
@@ -327,6 +350,8 @@ EXACT_QUERY_PARAMETERS = {
     ('/business/shipment/scan/{qr_token}', 'GET'): {'sourceWarehouseId', 'targetSiteId'},
     ('/business/usage/line-options', 'GET'): {'siteId'},
     ('/business/usage/tunnel-options', 'GET'): {'siteId'},
+    ('/business/usage/site-board', 'GET'): {'siteId'},
+    ('/business/usage-fifo/queue', 'GET'): {'siteId'},
     ('/business/return/scan/{qr_token}', 'GET'): {'mode', 'returnId'},
 }
 REQUIRED_QUERY_PARAMETERS = {
@@ -349,7 +374,7 @@ def _auth_dependencies(route: APIRoute) -> list[CheckUserInterfaceAuth]:
 
 def _assert_controller_permission_literals(test_case: unittest.TestCase, literals: list[str]) -> None:
     expected = Counter(EXPECTED_ROUTE_PERMISSIONS.values())
-    test_case.assertEqual(119, expected.total())
+    test_case.assertEqual(131, expected.total())
     test_case.assertEqual(expected, Counter(literals))
     test_case.assertEqual(EXPECTED_PERMISSIONS, frozenset(expected))
 
@@ -501,7 +526,7 @@ class ApiPermissionContractTest(unittest.TestCase):
         }
 
         self.assertEqual(set(EXPECTED_ROUTE_PERMISSIONS) | UNGUARDED_AUTHENTICATED_ROUTES, actual_operations)
-        self.assertEqual(121, len(actual_operations))
+        self.assertEqual(133, len(actual_operations))
 
         openapi_ai_paths = sorted(path for path in self.schema['paths'] if path == '/ai' or path.startswith('/ai/'))
         app_ai_paths = sorted(
@@ -582,7 +607,7 @@ class ApiPermissionContractTest(unittest.TestCase):
 
     def test_controller_ast_permission_contract_rejects_duplicate_call(self) -> None:
         literals = list(EXPECTED_ROUTE_PERMISSIONS.values())
-        self.assertEqual(119, len(literals))
+        self.assertEqual(131, len(literals))
         literals.append(literals[0])
 
         with self.assertRaises(AssertionError):