feat: Phase 3 FBA UI 预构建产物 + Phase 4 按钮级权限（fba_jwt + perms）（Epic #159）

deploy/fba/nginx-fba.conf

@@ -34,3 +34,33 @@ location /fba/ {
 
     proxy_read_timeout 60s;
 }
+
+# =============================================================================
+# Phase 3：FBA UI 静态站点（用户/角色/菜单/日志管理界面）
+#
+# 部署：将 deploy/fba/artifacts/fba-ui-dist.tar.gz 解压到
+#       /opt/apps/iAOP/deploy/fba/fba-ui/（解压后应存在 fba-ui/dist/index.html）
+#       tar -xzf deploy/fba/artifacts/fba-ui-dist.tar.gz -C deploy/fba/fba-ui/
+#
+# 产物构建参数（已固化在包内）：
+#   VITE_BASE=/fba-admin/
+#   VITE_GLOB_API_URL=http://39.101.182.167:8090/fba
+# 入口：http://39.101.182.167:8090/fba-admin/
+# =============================================================================
+
+location /fba-admin/ {
+    alias /opt/apps/iAOP/deploy/fba/fba-ui/dist/;
+    index index.html;
+
+    # SPA 路由回退（hash 模式下 mostly 用不到，兜底）
+    try_files $uri $uri/ /fba-admin/index.html;
+
+    # 带 hash 的静态资源长缓存；index.html 不缓存
+    location ~* \.(js|css|png|jpg|jpeg|gif|svg|woff2?)$ {
+        expires 7d;
+        add_header Cache-Control "public";
+    }
+    location = /fba-admin/index.html {
+        add_header Cache-Control "no-cache";
+    }
+}