feat: 多租户隔离P2批1 — OKR域+kpi_values加entity_id列

- 模型: Objective/KR/ObjectiveKPI/KPIValue 加 entity_id
- DB: 4表加列; kpi_values 1610条按kpi_id回填(1269酣客/341博海)
- OKR域: 测试O删除重建; okr list/get/create + ontology trace/objectives 按token企业隔离(跨企业404)
- KPIValue写入: data/bot_bridge/bot_kpis 创建时带entity_id
- 验证: 酣客创建OKR博海不可见; 跨企业读404; pytest 451通过(expenses单跑37通过为既有排序flaky)

backend/app/api/bot_bridge.py

@@ -528,7 +528,7 @@ def bot_import_excel(
                 errors.append(f"第{idx+2}行: KPI编码 '{kpi_code}' 不存在，跳过")
                 continue
             
-            kv = KPIValue(kpi_id=kpi.id, period=period, actual_value=val,
+            kv = KPIValue(kpi_id=kpi.id, entity_id=kpi.entity_id, period=period, actual_value=val,
                           source_batch=hashlib.md5(f"{datetime.now()}".encode()).hexdigest()[:12])
             db.add(kv)
             count += 1