针对 Jenkins 失败清单收敛 PO：角色左栏 list、准入可勾选行、用户表单 strict、报表宽表/mock 与表头别名。

Keep credentials, browser cache, and Cursor skills out of the repository so clones can run from .env.example and npm ci.