feat(backend): knowledge iteration + vision + neo4j + response contract source

dependencies.py 拆分为 dependencies/ 包; 新增 vision/ragflow_ingestion/neo4j 客户端与 h5_ai_task; alembic 045 图置信度迁移; 响应契约统一收尾。

backend/app/api/agents.py

@@ -291,14 +291,20 @@ async def agent_login(
             # BUG-001 修复: 签发半认证 token，使前端可以调用 otp-bind / otp-verify
             # 这些端点需要 Bearer token（get_current_user 认证），否则流程完全阻断
             from app.services.token_service import TokenService
+            from app.services.role_mapping_service import RoleMappingService
             from app.dependencies import get_redis
 
             redis_client = await get_redis()
             token_service = TokenService(redis_client)
+            # BUGFIX: 从 UserRole 表查询真实角色，而非硬编码 ["agent"]
+            role_service = RoleMappingService(db)
+            roles = await role_service.get_user_roles(agent.user_id)
+            if not roles:
+                roles = ["agent"]  # 无角色时默认 fallback
             bind_token = await token_service.create_token(
                 employee_id=agent.user_id,
                 name=agent.name,
-                roles=["agent"],
+                roles=roles,
                 avatar=avatar,
                 login_source="agent_pending_otp",
             )