fix(仓储): 修复查询关闭错误并迁移集成测试

修复 rows.Close 失败时的错误返回逻辑
迁移网关路由集成测试到 ent 事务基建
补齐仓储接口变更对应的测试桩方法
新增 backend/Makefile 统一测试命令
测试: GOTOOLCHAIN=go1.24.11 go test ./...
测试: golangci-lint run ./... --timeout=5m
测试: make test-integration

backend/internal/repository/user_repo.go

@@ -405,53 +405,6 @@ func (r *userRepository) syncUserAllowedGroupsWithClient(ctx context.Context, cl
 	return nil
 }
 
-func (r *userRepository) syncUserAllowedGroups(ctx context.Context, client *dbent.Client, exec sqlExecutor, userID int64, groupIDs []int64) error {
-	if client == nil || exec == nil {
-		return nil
-	}
-
-	// Keep join table as the source of truth for reads.
-	if _, err := client.UserAllowedGroup.Delete().Where(userallowedgroup.UserIDEQ(userID)).Exec(ctx); err != nil {
-		return err
-	}
-
-	unique := make(map[int64]struct{}, len(groupIDs))
-	for _, id := range groupIDs {
-		if id <= 0 {
-			continue
-		}
-		unique[id] = struct{}{}
-	}
-
-	legacyGroups := make([]int64, 0, len(unique))
-	if len(unique) > 0 {
-		creates := make([]*dbent.UserAllowedGroupCreate, 0, len(unique))
-		for groupID := range unique {
-			creates = append(creates, client.UserAllowedGroup.Create().SetUserID(userID).SetGroupID(groupID))
-			legacyGroups = append(legacyGroups, groupID)
-		}
-		if err := client.UserAllowedGroup.
-			CreateBulk(creates...).
-			OnConflictColumns(userallowedgroup.FieldUserID, userallowedgroup.FieldGroupID).
-			DoNothing().
-			Exec(ctx); err != nil {
-			return err
-		}
-	}
-
-	// Phase 1 compatibility: keep legacy users.allowed_groups array updated for existing raw SQL paths.
-	var legacy any
-	if len(legacyGroups) > 0 {
-		sort.Slice(legacyGroups, func(i, j int) bool { return legacyGroups[i] < legacyGroups[j] })
-		legacy = pq.Array(legacyGroups)
-	}
-	if _, err := exec.ExecContext(ctx, "UPDATE users SET allowed_groups = $1::bigint[] WHERE id = $2", legacy, userID); err != nil {
-		return err
-	}
-
-	return nil
-}
-
 func applyUserEntityToService(dst *service.User, src *dbent.User) {
 	if dst == nil || src == nil {
 		return