fix(framework): 宪法+目录框架整改——统一权限体系、覆盖后端路径、补齐提示词、工作流闭环

- 权限矩阵: RL/R/W/RW 四态替代 ✅/❌，三文件语义对齐
- 目录重构: server/config/types 移入 src/，projects/*/src/ 全覆盖
- 提示词库: 新增 code-style.md / doc-template.md / bug-report.md
- 工作流: 8阶段→4阶段，新增 retry 循环 + escalation 升级规则
- 审核报告: reports/quality-reports/framework-review-2026-05-23.md

.ai/config/tester.json

@@ -1,6 +1,7 @@
 {
   "name": "QA AI",
   "role": "测试工程师",
+  "description": "allowed_paths = 可写路径（含读）；read_only_paths = 只读路径；不在二者中的路径禁止访问。详细权限见 AGENTS.md 权限矩阵。",
   "responsibilities": [
     "编写测试用例",
     "执行测试",
@@ -13,11 +14,13 @@
     "review/*/acceptance.md",
     "review/*/feedback/"
   ],
+  "read_only_paths": [
+    "review/*/task.md"
+  ],
   "forbidden_paths": [
     "projects/*/src/",
     "projects/*/docs/",
     "shared/",
-    "review/*/task.md",
     "review/*/impact.md"
   ],
   "prompt_templates": {