feat: 08 后台四个页面的菜单与权限点落库 + 契约文档收口

为什么：内容治理 / 订单与权益 / 数据看板这三个页面的菜单此前刻意留空——
3-3 时页面还没做，菜单先落库会让前端动态路由指向不存在的组件。页面这一轮做完了，
把菜单（id 20–25，含组件路径）、权限点与超管授权按幂等写法补进 sql/data-phase1.sql，
刷新后台即生效，不需要清缓存重新登录。

- sql/data-phase1.sql：新增 3 个目录 + 3 个菜单，超管菜单授权 20–25；可重复执行
- docs/api-phase1.md：08 行由「仅剩后台页面（3-4）」改为「已实现」；
  新增「2.9 后台前端页面（已实现）」，列出五个页面的路由 / 组件路径 / 依赖权限点 / 覆盖接口

sql/data-phase1.sql

@@ -138,3 +138,28 @@ CROSS JOIN sys_menu m
 WHERE r.code = 'super_admin'
   AND m.id IN (15, 16)
 ON CONFLICT DO NOTHING;
+
+-- ---------- 菜单：内容治理 / 订单与权益 / 数据看板 ----------
+-- 这三条菜单拖到 3-4 页面做出来才加：菜单先落库而组件不存在的话，
+-- 前端动态路由会指向空组件、侧边栏直接报错（3-3 时就是这么刻意留空的）。
+-- component 指向 src/views/governance|commerce|dashboard/ 下的页面，前端按字符串动态加载。
+INSERT INTO sys_menu (id, parent_id, title, route_path, route_name, component, redirect, icon,
+                      permission_code, type, always_show, affix, sort) VALUES
+  (20, 0,  '内容治理',   '/governance', 'Governance',        '#',                                     '/governance/content', 'ep:chat-dot-round', 'comment:list',   'CATALOG', 1, 0, 6),
+  (21, 20, '评论与举报', 'content',     'governance-content', 'views/governance/ContentGovernanceView', '',                    '',                  'comment:list',   'MENU',    0, 0, 1),
+  (22, 0,  '订单与权益', '/commerce',   'Commerce',          '#',                                     '/commerce/orders',    'ep:coin',           'order:list',     'CATALOG', 1, 0, 7),
+  (23, 22, '订单管理',   'orders',      'commerce-orders',   'views/commerce/OrderManagementView',     '',                    '',                  'order:list',     'MENU',    0, 0, 1),
+  (24, 0,  '数据看板',   '/board',      'BoardCenter',       '#',                                     '/board/overview',     'ep:data-line',      'dashboard:view', 'CATALOG', 1, 0, 8),
+  (25, 24, '运营大盘',   'overview',    'board-overview',    'views/dashboard/BusinessDashboardView',  '',                    '',                  'dashboard:view', 'MENU',    0, 0, 1)
+ON CONFLICT (id) DO UPDATE SET parent_id = EXCLUDED.parent_id, title = EXCLUDED.title,
+  route_path = EXCLUDED.route_path, route_name = EXCLUDED.route_name, component = EXCLUDED.component,
+  redirect = EXCLUDED.redirect, icon = EXCLUDED.icon, permission_code = EXCLUDED.permission_code,
+  type = EXCLUDED.type, always_show = EXCLUDED.always_show, affix = EXCLUDED.affix, sort = EXCLUDED.sort;
+
+INSERT INTO sys_role_menu (role_id, menu_id)
+SELECT r.id, m.id
+FROM sys_role r
+CROSS JOIN sys_menu m
+WHERE r.code = 'super_admin'
+  AND m.id IN (20, 21, 22, 23, 24, 25)
+ON CONFLICT DO NOTHING;