feat: simplify agent permissions and require current ZIP backups

apps/api/prisma/migrations/20261004090000_agent_permanent_tokens/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE `AgentGrant` MODIFY `expiresAt` DATETIME(3) NULL COMMENT '访问令牌到期时间，UTC；空表示可撤销的永久个人令牌';