feat: 账套模式全量接入 — 12个API entity_id统一走token解析链 + 前端登录选公司/切换器重签token

- 后端: kpis/bsc_layers/cash/predict/growth_quality/tax_compliance/data 的 entity_id 参数统一改为 Depends(get_entity_id)
- 前端: 拦截器删除自动附加X-Entity-Id/entity_id; 登录页公司选择器(按用户名授权过滤); 切换器改POST /auth/switch-entity重新签发token+整页刷新; ReportCenter同步改造
- 修复前后端不匹配: login-entities路由→/auth/entities; login响应entity_id取user.entity_id

backend/app/api/kpis.py

@@ -7,6 +7,7 @@ from datetime import datetime
 import json
 
 from app.database import get_db
+from app.deps import get_entity_id
 from app.auth_middleware import require_auth, require_role, filter_kpis_by_role, kpi_visible_dims
 from app.models import StrategicMap, MapObjective, KPIDefinition, KPIValue, KPIAlert, OperationLog, Entity, KPICausality, KPIHierarchy
 from app.api.kpi_governance import validate_kpi_payload, kpi_issues_message
@@ -27,7 +28,7 @@ def list_kpis(
     keyword: Optional[str] = None,
     epic: Optional[str] = None,
     category: Optional[str] = None,
-    entity_id: Optional[int] = None,
+    entity_id: int = Depends(get_entity_id),
     kpi_level: Optional[str] = None,
     db: Session = Depends(get_db),
     current_user = Depends(require_auth),
@@ -141,7 +142,7 @@ def _calc_five_tier_score(current_value, target_value, is_reverse=False):
 
 @router.get("/score")
 def get_kpi_score(
-    entity_id: int = Query(1, ge=1),
+    entity_id: int = Depends(get_entity_id),
     period: Optional[str] = None,
     db: Session = Depends(get_db),
     current_user = Depends(require_auth),
@@ -243,7 +244,7 @@ def get_kpi_score(
 
 @router.get("/glossary")
 def get_kpi_glossary(
-    entity_id: int = Query(1, ge=1),
+    entity_id: int = Depends(get_entity_id),
     db: Session = Depends(get_db),
     current_user = Depends(require_auth),
 ):
@@ -314,7 +315,7 @@ def get_kpi_glossary(
 
 @router.get("/hierarchy")
 def get_kpi_hierarchy(
-    entity_id: int = Query(1, ge=1),
+    entity_id: int = Depends(get_entity_id),
     kpi_id: Optional[int] = None,
     db: Session = Depends(get_db),
     current_user = Depends(require_auth),