Merge remote-tracking branch 'upstream/aether-rust-pioneer' into fix-management-token-oauth-jsonb

# Conflicts:
#	crates/aether-data/src/lifecycle/bootstrap/postgres.rs
#	crates/aether-data/src/lifecycle/migrate/tests.rs

apps/aether-gateway/src/control/management_token_permissions.rs

@@ -152,6 +152,11 @@ const PERMISSION_GROUPS: &[PermissionGroup] = &[
         label: "系统",
         assignable: true,
     },
+    PermissionGroup {
+        scope: "tasks",
+        label: "后台任务",
+        assignable: true,
+    },
     PermissionGroup {
         scope: "usage",
         label: "用量",
@@ -434,6 +439,9 @@ fn permission_key(scope: &str, access: &str) -> &'static str {
         ("system", "read") => "admin:system:read",
         ("system", "write") => "admin:system:write",
         ("system", "admin") => "admin:system:admin",
+        ("tasks", "read") => "admin:tasks:read",
+        ("tasks", "write") => "admin:tasks:write",
+        ("tasks", "admin") => "admin:tasks:admin",
         ("usage", "read") => "admin:usage:read",
         ("usage", "write") => "admin:usage:write",
         ("usage", "admin") => "admin:usage:admin",
@@ -492,6 +500,7 @@ mod tests {
             "security",
             "stats",
             "system",
+            "tasks",
             "usage",
             "users",
             "video_tasks",