feat(identity): 支持用户和用户组批量管理

增加原子批量启用、禁用和删除接口及管理端多选操作，目标缺失时整批回滚。\n\n拆分管理端与 API Key 权限缓存并在弹窗保存后刷新候选；补齐失效规则一键清理样式、固定右侧操作列和 OpenAPI 契约。

apps/api/internal/store/postgres.go

@@ -66,6 +66,8 @@ var (
 	ErrInvalidCredentials            = errors.New("invalid account or password")
 	ErrInvalidInvitation             = errors.New("invalid or expired invitation code")
 	ErrInvalidAPIKeyScopes           = errors.New("api key scopes must not be empty")
+	ErrInvalidIdentityBatch          = errors.New("identity batch action or ids are invalid")
+	ErrIdentityBatchTargetNotFound   = errors.New("one or more identity batch targets were not found")
 	ErrAccessRuleResourceDenied      = errors.New("access rule resource is not available")
 	ErrInsufficientWalletBalance     = errors.New("insufficient wallet balance")
 	ErrLocalUserRequired             = errors.New("local gateway user is required")