feat: 规范化PocketBase数据库文档与原生API访问

- 将数据库文档拆分为按collection命名的标准文件，统一格式
- 补充tbl_company、tbl_system_dict等表的原生访问规则
- 新增users_tag、document_create等字段
- 优化用户资料更新接口，支持非必填字段
- 添加公司原生API测试脚本
- 归档本次变更至OpenSpec

openspec/specs/pocketbase-native-data-access/spec.md

@@ -0,0 +1,38 @@
+# pocketbase-native-data-access Specification
+
+## Purpose
+TBD - created by archiving change normalize-pocketbase-schema-docs. Update Purpose after archive.
+## Requirements
+### Requirement: PocketBase native company access SHALL expose a stable public create and query boundary
+
+The system SHALL allow native PocketBase clients to create company records publicly and to query company records through standard PocketBase records APIs, while privileged mutations remain restricted to management users.
+
+#### Scenario: Public client creates company record
+
+- **WHEN** a client calls the native PocketBase create-record API for `tbl_company`
+- **THEN** the request SHALL succeed without requiring a management token
+
+#### Scenario: Public client queries company list
+
+- **WHEN** a client calls the native PocketBase list-records API for `tbl_company`
+- **THEN** the request SHALL return company records using standard PocketBase pagination parameters
+
+#### Scenario: Management user updates company record
+
+- **WHEN** a client attempts to update or delete `tbl_company`
+- **THEN** PocketBase SHALL allow the operation only for management users or administrators
+
+### Requirement: Public dictionary and document reads SHALL be supported through native PocketBase APIs
+
+The system SHALL allow native PocketBase clients to read `tbl_system_dict` and `tbl_document` records without requiring application hooks tokens, while write operations remain restricted.
+
+#### Scenario: Public client reads dictionary records
+
+- **WHEN** a client calls the native PocketBase records API for `tbl_system_dict`
+- **THEN** list and view operations SHALL be readable without authentication
+
+#### Scenario: Public client reads document records
+
+- **WHEN** a client calls the native PocketBase records API for `tbl_document`
+- **THEN** list and view operations SHALL be readable without authentication
+