feat!: capabilities replace API token scopes; every admin endpoint declares one, with a picker UI [CI]

web/admin/src/App.tsx

@@ -153,7 +153,7 @@ export function App() {
           <span className="grow">
             <div style={{ fontWeight: 600 }}>{me.username ?? 'API 令牌'}</div>
             <div className="faint" style={{ fontSize: 12 }}>
-              {me.scope}
+              {me.kind === 'token' ? `API 令牌 · ${me.capabilities.length} 项能力` : '管理员'}
             </div>
           </span>
           <ThemeToggle />