feat(user): 사용자 자기정보 편집과 관리자 재설정 플로우를 연동

- lib/widgets/app_shell.dart에서 내 정보 다이얼로그를 추가하고 UserRepository.updateMe·비밀번호 변경 로직을 연결

- lib/features/masters/user/* 모듈에 phone·forcePasswordChange·passwordUpdatedAt 필드를 반영하고 reset-password/update-me API를 사용

- lib/core/validation/password_rules.dart을 신설해 비밀번호 정책 검증을 공통화하고 신규 위젯·테스트에서 재사용

- doc/stock_approval_system_api_v4.md 등 문서를 users 스펙 개편 내용으로 갱신하고 user_management_plan.md를 추가

- test/widgets/app_shell_test.dart 등에서 자기정보 수정·비밀번호 재설정 시나리오를 검증하고 기존 테스트를 보강

lib/features/masters/user/data/dtos/user_dto.dart

@@ -15,6 +15,8 @@ class UserDto {
     this.isActive = true,
     this.isDeleted = false,
     this.note,
+    this.forcePasswordChange = false,
+    this.passwordUpdatedAt,
     this.createdAt,
     this.updatedAt,
   });
@@ -28,6 +30,8 @@ class UserDto {
   final bool isActive;
   final bool isDeleted;
   final String? note;
+  final bool forcePasswordChange;
+  final DateTime? passwordUpdatedAt;
   final DateTime? createdAt;
   final DateTime? updatedAt;
 
@@ -35,16 +39,22 @@ class UserDto {
   factory UserDto.fromJson(Map<String, dynamic> json) {
     return UserDto(
       id: json['id'] as int?,
-      employeeNo: json['employee_no'] as String,
-      employeeName: json['employee_name'] as String,
+      employeeNo:
+          json['employee_id'] as String? ??
+          json['employee_no'] as String? ??
+          '-',
+      employeeName:
+          json['name'] as String? ?? json['employee_name'] as String? ?? '-',
       email: json['email'] as String?,
-      mobileNo: json['mobile_no'] as String?,
+      mobileNo: json['phone'] as String? ?? json['mobile_no'] as String?,
       group: json['group'] is Map<String, dynamic>
           ? UserGroupDto.fromJson(json['group'] as Map<String, dynamic>)
           : null,
       isActive: (json['is_active'] as bool?) ?? true,
       isDeleted: (json['is_deleted'] as bool?) ?? false,
       note: json['note'] as String?,
+      forcePasswordChange: (json['force_password_change'] as bool?) ?? false,
+      passwordUpdatedAt: _parseDate(json['password_updated_at']),
       createdAt: _parseDate(json['created_at']),
       updatedAt: _parseDate(json['updated_at']),
     );
@@ -61,6 +71,8 @@ class UserDto {
     isActive: isActive,
     isDeleted: isDeleted,
     note: note,
+    forcePasswordChange: forcePasswordChange,
+    passwordUpdatedAt: passwordUpdatedAt,
     createdAt: createdAt,
     updatedAt: updatedAt,
   );