feat(publish): add tenant publish management with desktop deep-link

Expose tenant-authenticated publish task list and retry endpoints so the
admin web can show desktop publish state without an Electron bridge, and
register a `shengxintui://` deep-link so the page can hand off to the
desktop client workbench.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/admin-web/src/layouts/AppShell.vue

@@ -9,6 +9,7 @@ import {
   PictureOutlined,
   RadarChartOutlined,
   SearchOutlined,
+  SendOutlined,
 } from '@ant-design/icons-vue'
 import { useQuery } from '@tanstack/vue-query'
 import { computed, type Component } from 'vue'
@@ -130,6 +131,7 @@ const navSections = computed<NavSection[]>(() => {
       title: t('nav.contentManagement'),
       items: [
         { key: '/media', label: t('nav.media'), icon: GlobalOutlined },
+        { key: '/publish-management', label: t('nav.publishManagement'), icon: SendOutlined },
         { key: '/knowledge', label: t('nav.knowledge'), icon: BookOutlined },
         { key: '/images', label: t('nav.images'), icon: PictureOutlined },
       ],