```

feat: 添加数据库迁移脚本并更新Dockerfile配置

- 在Dockerfile中添加alembic配置文件和目录的复制指令
- 更新alembic/env.py注册新的模块模型：events、workflows、writebacks
- 生成完整的初始数据库schema迁移脚本，包含以下表：
  - approval_requests, attendance_records, audit_logs, domain_events
  - expenses, feishu_event_receipts, fund_accounts, legacy_sync_runs
  - official_writeback_runs, performance_metrics, policies, procurements
  - projects, report_push_runs, risk_event_actions, risk_events
  - standards, suppliers, work_reports, work_tasks, workflow_actions
  - workflow_instances等21个数据表结构定义
- 在API路由器中添加新模块的路由：events、workflows、writebacks、observability
```

app/modules/writebacks/routes.py

@@ -0,0 +1,66 @@
+from fastapi import APIRouter, Depends, Query
+from sqlalchemy.orm import Session
+
+from app.core.database import get_db
+from app.core.security import ApiPrincipal, require_api_key
+from app.modules.writebacks.constants import WritebackResponseKey
+from app.modules.writebacks.schemas import WritebackCreateRequest, WritebackSubmitRequest
+from app.modules.writebacks.service import WritebackService
+
+router = APIRouter(dependencies=[Depends(require_api_key)])
+
+
+@router.get("")
+def list_writebacks(
+    status: str | None = None,
+    limit: int = Query(default=100, ge=1, le=500),
+    db: Session = Depends(get_db),
+) -> dict:
+    return {
+        WritebackResponseKey.ITEMS: WritebackService(db).list_runs(
+            status_filter=status,
+            limit=limit,
+        )
+    }
+
+
+@router.post("")
+def create_writeback(
+    payload: WritebackCreateRequest,
+    db: Session = Depends(get_db),
+    principal: ApiPrincipal = Depends(require_api_key),
+) -> dict:
+    return {
+        WritebackResponseKey.DATA: WritebackService(db).create_run(
+            domain=payload.domain,
+            record_id=payload.record_id,
+            action=payload.action,
+            payload=payload.payload,
+            actor=principal.actor,
+            idempotency_key=payload.idempotency_key,
+        )
+    }
+
+
+@router.get("/{code}")
+def get_writeback(
+    code: str,
+    db: Session = Depends(get_db),
+) -> dict:
+    return {WritebackResponseKey.DATA: WritebackService(db).get_run(code)}
+
+
+@router.post("/{code}/submit")
+def submit_writeback(
+    code: str,
+    payload: WritebackSubmitRequest,
+    db: Session = Depends(get_db),
+    principal: ApiPrincipal = Depends(require_api_key),
+) -> dict:
+    return {
+        WritebackResponseKey.DATA: WritebackService(db).submit_run(
+            code,
+            approval_ticket_id=payload.approval_ticket_id,
+            actor=principal.actor,
+        )
+    }