feat: CVAT 标注引擎、我的标注收件箱与 ADAS Cuboid 送标

- 统一标注引擎为 CVAT：客户端/配置/格式转换、iframe 标注页、docker-compose.cvat.yml 与 no_auth 补丁
- 移除 Label Studio 相关配置与构建脚本，清理 embedded.bak 备份与误提交的 node_modules
- 新增「我的标注」：跨 Campaign 收件箱、逐张清单、CVAT frame 跳转
- 飞书任务分配：通讯录同步选人、按量分配、分配后 DM 通知（含 my-tasks 链接）
- ADAS cuboid_7cls 数据湖接入：workflow 路径、register-batch、开标上传与标注同步
- 数据湖挂载 AS_DATA_LAKE_ROOT、datasets/adas 符号链接、reset_labeling 运维脚本
- 补充 docs/HANDOVER.md 项目交接文档

Co-authored-by: Cursor <cursoragent@cursor.com>

vendor/cvat/patches/no_auth.py

@@ -0,0 +1,25 @@
+"""
+Auto-authentication class that logs in every request as a default admin user.
+"""
+from django.contrib.auth import get_user_model
+from rest_framework import authentication
+
+User = get_user_model()
+
+
+class NoAuthAuthentication(authentication.BaseAuthentication):
+    """Authenticate every request as the first superuser found in the DB."""
+
+    def authenticate(self, request):
+        try:
+            user = User.objects.filter(is_superuser=True).first()
+            if not user:
+                user = User.objects.create_superuser(
+                    username="auto",
+                    email="auto@local.dev",
+                    password="auto",
+                )
+            return (user, None)
+        except Exception:
+            pass
+        return None