[Jmmt-mingrui]

Summary

• add AST parsing for Doris MATCH, MATCH_ANY, MATCH_ALL, MATCH_PHRASE, MATCH_PHRASE_PREFIX, MATCH_PHRASE_EDGE, and MATCH_REGEXP predicates
• support ranked BM25 queries using score() with MATCH operators, including USING ANALYZER
• accept single-statement read-only Doris SQL even when sqlglot does not yet model Doris-specific SELECT syntax such as TABLET, TABLESAMPLE, and REPEATABLE
• keep DML, DDL, stacked statements, and SELECT INTO OUTFILE/DUMPFILE blocked in the tokenizer fallback
• authorize Semantic Web UI management for any Doris user assigned the exact built-in admin role instead of checking only the admin username
• keep ordinary authenticated users read-only and fail closed when role resolution is unavailable
• update English and Chinese documentation

Validation

• python -m unittest discover -s test -p test_*.py -q
• 244 tests passed
• git diff --check origin/main...HEAD

Scope

Issue #26 multi-replica architecture is intentionally not changed in this PR.

Closes #25
Closes #28