fix: 补全审计/出库审批/采购管理/借库审批的权限保护+公司隔离

- audit.py: 补@permission_required(system_audit)+import, 审计日志通过split_part关联用户表过滤公司
- outbound.py: 出库审批5个端点全补@permission_required(outbound_list)
- purchase.py: 采购管理7个端点全补@permission_required(inbound_buy)
- borrow_service: 借库审批列表通过applicant_id关联用户表过滤公司
- outbound_service: 出库审批列表通过applicant_id关联用户表过滤公司
- purchase_service: 采购列表通过base_id+requester_id双路过滤公司
- base_service/search_material: 去除debug日志
- decorators: 去除debug日志

inventory-backend/app/api/v1/outbound.py

@@ -234,6 +234,7 @@ def get_current_user_info():
 # --------------------------------------------------------
 @outbound_bp.route('/request', methods=['POST'])
 @jwt_required()
+@permission_required('outbound_list')
 def create_outbound_request():
     """
     创建出库审批单（申请阶段，用户只需提交宏观物料信息，无需关联具体库存记录）
@@ -322,6 +323,7 @@ def create_outbound_request():
 # --------------------------------------------------------
 @outbound_bp.route('/request/<int:request_id>/approve', methods=['PATCH'])
 @jwt_required()
+@permission_required('outbound_list')
 def approve_outbound_request(request_id):
     """
     审批出库申请
@@ -375,6 +377,7 @@ def approve_outbound_request(request_id):
 # --------------------------------------------------------
 @outbound_bp.route('/request', methods=['GET'])
 @jwt_required()
+@permission_required('outbound_list')
 def get_outbound_request_list():
     """
     获取出库审批单列表
@@ -421,6 +424,7 @@ def get_outbound_request_list():
 # --------------------------------------------------------
 @outbound_bp.route('/request/<int:request_id>', methods=['GET'])
 @jwt_required()
+@permission_required('outbound_list')
 def get_outbound_request_detail(request_id):
     """获取出库审批单详情"""
     try: