chore(s8): bind exception handler to employee master

- Create dedicated EmployeeMaster (E-S1HANDLER / S1异常处理员) bound to s1_exception_handler via sys_user_id=1329908000151.
- Unblocks S8 submit-verification / approve-verification (close) lifecycle: processing actions resolve the current login account through EmployeeMaster.sys_user_id; handler previously had no employee binding and was rejected with 400.
- Idempotent migration (NOT EXISTS by Employee or sys_user_id); does not touch existing employees, Demo01/Demo02, TB001, S8 rules, permissions, or history exceptions.
- Dev close lifecycle verified end-to-end: NEW→claim→ASSIGNED→start→IN_PROGRESS→submit-verification→PENDING_VERIFICATION→approve-verification→CLOSED.
- Renumbered 1.0.194→1.0.195 (origin 1.0.194 already taken); business content unchanged.

chore: bump version server 1.0.195

server/Admin.NET.Web.Entry/Admin.NET.Web.Entry.csproj

@@ -11,9 +11,9 @@
     <GenerateSatelliteAssembliesForCore>true</GenerateSatelliteAssembliesForCore>
     <Copyright>Admin.NET</Copyright>
     <Description>Admin.NET 通用权限开发平台</Description>
-    <AssemblyVersion>1.0.194</AssemblyVersion>
-    <FileVersion>1.0.194</FileVersion>
-    <Version>1.0.194</Version>
+    <AssemblyVersion>1.0.195</AssemblyVersion>
+    <FileVersion>1.0.195</FileVersion>
+    <Version>1.0.195</Version>
   </PropertyGroup>
 
   <ItemGroup>
@@ -175,6 +175,9 @@
     <None Update="UpdateScripts\1.0.193.sql">
       <CopyToOutputDirectory>Always</CopyToOutputDirectory>
     </None>
+    <None Update="UpdateScripts\1.0.195.sql">
+      <CopyToOutputDirectory>Always</CopyToOutputDirectory>
+    </None>
   </ItemGroup>
 
   <ItemGroup>

server/Admin.NET.Web.Entry/UpdateScripts/1.0.195.sql

@@ -0,0 +1,21 @@
+-- =============================================================================
+-- S8-S1-EXCEPTION-HANDLER-EMPLOYEE-BINDING-1
+-- 目的：为 S1 异常处理账号 s1_exception_handler(SysUser.Id=1329908000151) 新建专属
+--       EmployeeMaster 记录并绑定 sys_user_id，打通 S8 submit-verification / close 生命周期
+--       （处理动作经 EmployeeMaster.sys_user_id 反查当前登录账号，handler 此前无员工绑定即被 400 拦截）。
+-- 字段：Employee=E-S1HANDLER / Name=S1异常处理员 / Department=D-UNASSIGNED(未归属) /
+--       factory_ref_id=1329900200002 / company_ref_id=1329900200001 / tenant_id=797403760988229 /
+--       Domain=S8-DEMO-F1 / IsActive=1 / sys_user_id=1329908000151；RecID 用表自增，不手工指定。
+-- 安全：幂等（Employee 或 sys_user_id 任一已存在则不插）；不动现有员工；不复用 Demo01/Demo02 员工；
+--       不改 TB001 / S8 规则 / 权限 / 历史异常。
+-- 回滚：DELETE FROM EmployeeMaster WHERE Employee='E-S1HANDLER' AND sys_user_id=1329908000151;
+-- 版本：原拟 1.0.194，因 origin 已被占用顺延为 1.0.195（业务内容不变）。
+-- =============================================================================
+INSERT INTO EmployeeMaster
+  (company_ref_id, factory_ref_id, tenant_id, Domain, Employee, Name, Department, IsActive, sys_user_id, CreateTime)
+SELECT 1329900200001, 1329900200002, 797403760988229, 'S8-DEMO-F1', 'E-S1HANDLER', 'S1异常处理员',
+       'D-UNASSIGNED', 1, 1329908000151, '2026-06-23 00:00:00'
+FROM DUAL
+WHERE NOT EXISTS (
+  SELECT 1 FROM EmployeeMaster WHERE Employee = 'E-S1HANDLER' OR sys_user_id = 1329908000151
+);