```

feat(auth): 添加用户权限获取接口并完善JWT令牌角色信息

- 在JWT令牌中添加用户角色信息
- 新增get_my_permissions接口用于获取当前用户权限码列表
- 重构认证回调逻辑，增加错误日志记录
- 更新用户信息获取接口使用Authorization头验证
```

backend/app/api/v1/provision.py

@@ -4,6 +4,7 @@ from sqlalchemy.orm import Session
 from pydantic import BaseModel
 from typing import List, Optional
 from app.core.database import get_db
+from app.middleware.permission_middleware import require_permission
 from app.services.provision_service import ProvisionService
 
 router = APIRouter(prefix="/api/provision", tags=["业务下发"])
@@ -29,7 +30,8 @@ class ProvisionResponse(BaseModel):
 @router.post("/service", response_model=ProvisionResponse)
 def provision_single_device(
     request: ProvisionRequest,
-    db: Session = Depends(get_db)
+    db: Session = Depends(get_db),
+    _: dict = Depends(require_permission('device.edit')),
 ):
     """下发业务到单个设备"""
     service = ProvisionService(db)
@@ -51,7 +53,8 @@ def provision_single_device(
 @router.post("/batch", response_model=dict)
 def provision_batch_devices(
     request: BatchProvisionRequest,
-    db: Session = Depends(get_db)
+    db: Session = Depends(get_db),
+    _: dict = Depends(require_permission('device.edit')),
 ):
     """批量下发业务"""
     service = ProvisionService(db)