perf: 系统级性能优化与并发安全修复

## 并发安全修复 (4处)
- scrap.py: 报废执行添加 SELECT FOR UPDATE 悲观锁，消除 TOCTOU 竞态
- stock.py (adjust_stock): 盘点调整添加 for_update=True 行锁
- outbound_service.py: 低库存预警 SMTP 调用移到 commit 之后，避免长事务
- trans_service.py: execute_dispatch 按 (source_table, id) 排序 items，消除死锁风险

## N+1 查询优化 (2处)
- inventory_task.py: _prefetch_inventory_map 单条 UNION ALL+GROUP BY 替代循环内逐条查询（N*4次→2次）
- stock.py (export_stocktake): get_borrowed_qty 批量 GROUP BY 替代逐条 TransBorrow 查询（~18000次→1次）

## BOM 列表性能重构
- bom_service.py: get_bom_list 单条 GROUP BY+string_agg+分页，消除 N+1 循环查询
- bom_service.py: 新增 get_bom_summary (轻量 GROUP BY category+COUNT)
- bom.py: 新增 /api/v1/bom/summary 路由，/list 支持 category 过滤

## Odoo 基础信息懒加载
- base_service.py: 新增 get_odoo_summary (GROUP BY category+COUNT)
- base.py: 新增 /api/v1/inbound/base/odoo-summary 路由
- buyOdoo.vue: 懒加载分组架构 (fetchOdooSummary + loadGroupItems)
- material_base.ts: 新增 getOdooSummary API

## 前端 Bug 修复
- BomManage.vue: 懒加载分组 (fetchBomSummary + loadGroupItems + collapse)
- BomManage.vue: 适配新 API 格式 (res.data.items 替代 res.data)
- buyOdoo.vue: 移除 "点击展开加载" 文字
- Selection.vue + borrow/apply/index.vue: openBomSelect 适配新 API 格式

inventory-backend/app/api/v1/inbound/base.py

@@ -168,6 +168,31 @@ def get_list():
         return jsonify({"code": 500, "msg": str(e)}), 500
 
 
+# ==============================================================================
+# 1.4 Odoo 分组摘要接口 (GET /api/v1/inbound/base/odoo-summary)
+# 极轻量查询：仅 GROUP BY category + COUNT，不 JOIN 任何库存表
+# ==============================================================================
+@inbound_base_bp.route('/odoo-summary', methods=['GET'])
+@permission_required('material_list')
+def get_odoo_summary():
+    try:
+        keyword = request.args.get('keyword', '').strip() or None
+        is_enabled_raw = request.args.get('isEnabled', None)
+        is_enabled = None
+        if is_enabled_raw is not None:
+            val = str(is_enabled_raw).lower()
+            if val in ('1', 'true', 'yes', 't'):
+                is_enabled = True
+            elif val in ('0', 'false', 'no', 'f'):
+                is_enabled = False
+
+        data = MaterialBaseService.get_odoo_summary(keyword=keyword, is_enabled=is_enabled)
+        return jsonify({"code": 200, "msg": "success", "data": data})
+    except Exception as e:
+        traceback.print_exc()
+        return jsonify({"code": 500, "msg": str(e)}), 500
+
+
 # ==============================================================================
 # 2.1 选项接口 (GET /api/v1/inbound/base/options)
 # ==============================================================================