[FEAT] 角色權限編輯頁面重構與多項 UI/翻譯優化

- 新增獨立角色權限編輯頁面 (roles-edit.blade.php)，採整合式佈局
- 重構 PermissionController 以支援角色建立/編輯/刪除完整 CRUD
- 移除角色手動層級選擇，改為自動判定並顯示所屬單位
- 補齊 20+ 項 menu 權限 Key 的三語系翻譯 (zh_TW/en/ja)
- 修正子項目佈局跑版問題 (min-w-0/flex-shrink-0 防溢出)
- 更新 RoleSeeder 加入巢狀權限結構
- 同步更新側邊欄選單與路由配置

app/Http/Controllers/Admin/PermissionController.php

@@ -42,20 +42,12 @@ class PermissionController extends Controller
             $permissionQuery->whereIn('name', $user->getAllPermissions()->pluck('name'));
         }
 
+        // 權限分組邏輯
         $all_permissions = $permissionQuery->get()
-            ->filter(function($perm) {
-                // 排除子項項目，只顯示主要權限
-                $excluded = [
-                    'menu.basic.machines',
-                    'menu.basic.payment-configs',
-                    'menu.companies',
-                    'menu.accounts',
-                    'menu.roles',
-                ];
-                return !in_array($perm->name, $excluded);
-            })
             ->groupBy(function($perm) {
                 if (str_starts_with($perm->name, 'menu.')) {
+                    // 主選單權限：menu.xxx (兩段)
+                    // 子選單權限：menu.xxx.yyy (三段)
                     return 'menu';
                 }
                 return 'other';
@@ -68,6 +60,60 @@ class PermissionController extends Controller
         return view('admin.permission.roles', compact('roles', 'all_permissions', 'title', 'currentUserRoleIds', 'companies'));
     }
 
+    /**
+     * Show the form for creating a new role.
+     */
+    public function createRole()
+    {
+        $role = new \App\Models\System\Role();
+        $user = auth()->user();
+
+        // 權限遞迴約束
+        $permissionQuery = \Spatie\Permission\Models\Permission::query();
+        if (!$user->isSystemAdmin()) {
+            $permissionQuery->whereIn('name', $user->getAllPermissions()->pluck('name'));
+        }
+
+        $all_permissions = $permissionQuery->get()->groupBy(fn($p) => str_starts_with($p->name, 'menu.') ? 'menu' : 'other');
+
+        $title = request()->routeIs('*.sub-account-roles.create') ? __('Create Sub Account Role') : __('Create New Role');
+        $back_url = request()->routeIs('*.sub-account-roles.create') ? route('admin.data-config.sub-account-roles') : route('admin.permission.roles');
+
+        return view('admin.permission.roles-edit', compact('role', 'all_permissions', 'title', 'back_url'));
+    }
+
+    /**
+     * Show the form for editing the specified role.
+     */
+    public function editRole($id)
+    {
+        $role = \App\Models\System\Role::findOrFail($id);
+        $user = auth()->user();
+
+        // 權限遞迴約束：租戶管理員只能看到並指派自己擁有的權限
+        $permissionQuery = \Spatie\Permission\Models\Permission::query();
+        if (!$user->isSystemAdmin()) {
+            $permissionQuery->whereIn('name', $user->getAllPermissions()->pluck('name'));
+        }
+
+        // 權限分組邏輯
+        $all_permissions = $permissionQuery->get()
+            ->groupBy(function($perm) {
+                if (str_starts_with($perm->name, 'menu.')) {
+                    return 'menu';
+                }
+                return 'other';
+            });
+
+        // 根據路由決定標題
+        $title = request()->routeIs('*.sub-account-roles.edit') ? __('Edit Sub Account Role') : __('Edit Role Permissions');
+        
+        // 麵包屑/返回路徑
+        $back_url = request()->routeIs('*.sub-account-roles.edit') ? route('admin.data-config.sub-account-roles') : route('admin.permission.roles');
+
+        return view('admin.permission.roles-edit', compact('role', 'all_permissions', 'title', 'back_url'));
+    }
+
     /**
      * Store a newly created role in storage.
      */
@@ -97,7 +143,7 @@ class PermissionController extends Controller
         if (!empty($validated['permissions'])) {
             $perms = $validated['permissions'];
             
-            // 權限遞迴約束驗證：確保指派的權限是操作者權限的子集
+            // 權限遞迴約束驗證
             if (!auth()->user()->isSystemAdmin()) {
                 $currentUserPerms = auth()->user()->getAllPermissions()->pluck('name');
                 if (collect($perms)->diff($currentUserPerms)->isNotEmpty()) {
@@ -112,7 +158,8 @@ class PermissionController extends Controller
             $role->syncPermissions($perms);
         }
 
-        return redirect()->back()->with('success', __('Role created successfully.'));
+        $target_route = request()->routeIs('*.sub-account-roles.*') ? 'admin.data-config.sub-account-roles' : 'admin.permission.roles';
+        return redirect()->route($target_route)->with('success', __('Role created successfully.'));
     }
 
     /**
@@ -170,7 +217,8 @@ class PermissionController extends Controller
         }
         $role->syncPermissions($perms);
 
-        return redirect()->back()->with('success', __('Role updated successfully.'));
+        $target_route = request()->routeIs('*.sub-account-roles.*') ? 'admin.data-config.sub-account-roles' : 'admin.permission.roles';
+        return redirect()->route($target_route)->with('success', __('Role updated successfully.'));
     }
 
     /**