feat: cleanly add user preferences api and rollback wrong auth routes

inventory-backend/app/models/system.py

@@ -23,6 +23,7 @@ class SysUser(db.Model):
     status = db.Column(db.String(20), default='active')
     password_hash = db.Column(db.Text)
     created_at = db.Column(db.DateTime, default=beijing_time)
+    preferences = db.Column(db.JSON, nullable=True)
 
     def set_password(self, password):
         """生成加密密码"""
@@ -61,7 +62,8 @@ class SysUser(db.Model):
             'department': self.department,
             'role': self.role,
             'status': self.status,
-            'created_at': self.created_at.isoformat() if self.created_at else None
+            'created_at': self.created_at.isoformat() if self.created_at else None,
+            'preferences': self.preferences or {}
         }