feat(ECR-017): AskOperations 问答会话只读并 Closed

新增 admin.ask.read、GET /admin/ask/threads*（AskSessionView）与 admin-h5「问答」页；禁改消息/UGC/真支付。

Co-authored-by: Cursor <cursoragent@cursor.com>

proto/openapi.yaml

@@ -359,6 +359,45 @@ paths:
           schema: { type: string, format: uuid }
       responses: { '200': { description: OK } }
 
+  /api/v1/admin/ask/threads:
+    get:
+      tags: [admin]
+      summary: List AskSessionView (read-only)
+      description: Requires admin.ask.read
+      parameters:
+        - in: query
+          name: user_id
+          schema: { type: string, format: uuid }
+        - in: query
+          name: limit
+          schema: { type: integer }
+        - in: query
+          name: offset
+          schema: { type: integer }
+      responses:
+        '200':
+          description: OK
+        '401':
+          description: Unauthorized
+        '403':
+          description: Forbidden
+
+  /api/v1/admin/ask/threads/{id}:
+    get:
+      tags: [admin]
+      summary: Ask session detail with messages
+      description: Requires admin.ask.read; no message mutation
+      parameters:
+        - in: path
+          name: id
+          required: true
+          schema: { type: string, format: uuid }
+      responses:
+        '200':
+          description: OK
+        '404':
+          description: Not found
+
   /api/v1/admin/orders:
     get:
       tags: [admin]