```

feat: 添加审批系统和遗留查询功能支持

- 添加审批系统，包括审批请求模型、服务和路由，支持创建、批准和拒绝操作
- 实现审批API密钥验证机制，区分普通API和审批API访问权限
- 添加Alembic数据库迁移支持，更新初始schema版本并添加降级保护
- 配置遗留MySQL查询白名单机制，支持命名查询和参数化查询
- 更新业务服务以集成审批流程，高风险操作需要审批票证
- 调整安全认证使用常量定义的HTTP头，增强安全性比较
- 优化.gitignore配置，添加日志目录排除和文档文件包含规则
- 更新Dockerfile添加alembic依赖包，修复OpenClaw适配器错误处理
```

app/modules/reports/service.py

@@ -900,19 +900,13 @@ class ReportService:
             WorkTask.due_date >= start,
             WorkTask.due_date <= end,
         ]
-        start_at = datetime.combine(start, datetime.min.time())
-        end_at = datetime.combine(end, datetime.max.time())
         project_filters = []
         risk_filters = [RiskEvent.status == StatusValue.OPEN]
         procurement_filters = [
             Procurement.approval_status.in_(PENDING_APPROVAL_STATUSES),
-            Procurement.created_at >= start_at,
-            Procurement.created_at <= end_at,
         ]
         expense_filters = [
             Expense.approval_status.in_(PENDING_APPROVAL_STATUSES),
-            Expense.created_at >= start_at,
-            Expense.created_at <= end_at,
         ]
         attendance_filters = [
             AttendanceRecord.work_date >= start,