fix(iam): define and grant existing cargo discard approval permission

scripts/admin-test-env-modules/initialization-baseline-contract.test.mjs

@@ -56,7 +56,7 @@ test('平台管理员由外部bcrypt引导，强制首登改密且不创建客
 })
 
 test('必要系统种子完整保留，但不写入示例资源与业务事实', () => {
-  for (const [name, count] of Object.entries({ iam_role: 8, iam_permission: 370, iam_role_permission: 552,
+  for (const [name, count] of Object.entries({ iam_role: 8, iam_permission: 370, iam_role_permission: 551,
     iam_data_scope: 7, wh_warehouse: 318, wh_warehouse_address: 318, wh_service_capability: 4,
     fl_fee_item: 112, fl_price_channel_catalog: 15, fl_price_origin_alias: 7, fl_price_warehouse_mapping: 4,
     file_export_task_guard: 1, fin_subject: 1 })) assert.equal(seedRows(cn, name).length, count, name)
@@ -80,6 +80,7 @@ test('国内IAM权限与角色授权没有丢失或悬挂，客户模板仍完
   for (const code of ['merchant:enterprise', 'merchant:order:quick-create', 'merchant:finance:statement',
     'merchant:warehouse:delivery:list', 'merchant:warehouse:delivery:create']) assert.ok(merchant.has(code), code)
   const admin = roleAuthorities(cn, 'PLATFORM_ADMIN')
+  assert.ok(admin.has('lastleg:cargo-discard:approve'), 'existing discard review endpoint must be grantable to platform administrator')
   for (const code of ['platform:order:declaration:edit', 'platform:firstleg:inbound:hold',
     'platform:overseas-warehouse:last-mile-order:list', 'platform:overseas-business:purchase:list',
     'platform:overseas-master-data:quote:list', 'platform:finance:fee-source:review',