feat(auth): migrate to Keycloak metadata auth

tests/api/test_api_integration.py

@@ -2,7 +2,7 @@
 """
 测试新增 API 集成
 
-验证新的认证、用户管理和审计日志接口是否正确集成
+验证 Keycloak/metadata 认证和审计日志接口是否正确集成
 """
 
 import sys
@@ -17,16 +17,15 @@ sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), "../.
     "module_name, desc",
     [
         ("app.core.encryption", "加密模块"),
-        ("app.core.security", "安全模块"),
         ("app.core.audit", "审计模块"),
-        ("app.domain.models.role", "角色模型"),
-        ("app.domain.schemas.user", "用户Schema"),
         ("app.domain.schemas.audit", "审计Schema"),
-        ("app.auth.permissions", "权限控制"),
-        ("app.api.v1.endpoints.auth", "认证接口"),
-        ("app.api.v1.endpoints.user_management", "用户管理接口"),
+        ("app.auth.keycloak_dependencies", "Keycloak Token 校验"),
+        ("app.auth.metadata_dependencies", "Metadata 用户解析"),
+        ("app.auth.project_dependencies", "项目权限控制"),
+        ("app.api.v1.endpoints.agent_auth", "Agent 认证上下文接口"),
+        ("app.api.v1.endpoints.meta", "Metadata 接口"),
         ("app.api.v1.endpoints.audit", "审计日志接口"),
-        ("app.infra.db.metadb.repositories.user_repository", "用户仓储"),
+        ("app.infra.db.metadb.repositories.metadata_repository", "Metadata 仓储"),
         ("app.infra.db.metadb.repositories.audit_repository", "审计仓储"),
         ("app.infra.audit.middleware", "审计中间件"),
     ],
@@ -49,8 +48,8 @@ def test_router_configuration():
         routes = [r.path for r in api_router.routes if hasattr(r, "path")]
 
         # 验证基础路径是否存在
-        assert any("/auth" in r for r in routes), "缺少认证相关路由 (/auth)"
-        assert any("/users" in r for r in routes), "缺少用户管理路由 (/users)"
+        assert any("/agent/auth/context" in r for r in routes), "缺少 Agent 认证上下文路由"
+        assert any("/meta" in r for r in routes), "缺少 Metadata 路由"
         assert any("/audit" in r for r in routes), "缺少审计日志路由 (/audit)"
 
     except Exception as e: