feat(ECR-045): ImageCardDeck 写面闭环并 Closed

复用 admin.explore.write、POST/PUT+审计、C端 GET /cards/decks、
H5 无 active 空态/失败回退；migration 000054。无牌面内容编辑。
ExploreConfig Loop STOP，禁自动 ECR-046。

Co-authored-by: Cursor <cursoragent@cursor.com>

proto/openapi.yaml

@@ -1308,6 +1308,21 @@ paths:
           description: Unauthorized
         '403':
           description: Forbidden
+    post:
+      tags: [admin]
+      summary: Create ImageCardDeck
+      description: Requires admin.explore.write · ECR-045 · deck catalog only · no card-face edit
+      responses:
+        '200':
+          description: OK
+        '400':
+          description: Invalid
+        '401':
+          description: Unauthorized
+        '403':
+          description: Forbidden
+        '409':
+          description: Code conflict
 
   /api/v1/admin/explore/image-card-decks/{id}:
     get:
@@ -1323,6 +1338,26 @@ paths:
           description: OK
         '404':
           description: Not found
+    put:
+      tags: [admin]
+      summary: Update ImageCardDeck
+      description: Requires admin.explore.write · deactivate via active=false · ECR-045
+      parameters:
+        - in: path
+          name: id
+          required: true
+          schema: { type: string, format: uuid }
+      responses:
+        '200':
+          description: OK
+        '400':
+          description: Invalid
+        '403':
+          description: Forbidden
+        '404':
+          description: Not found
+        '409':
+          description: Code conflict
 
   /api/v1/admin/growth/report-templates:
     get:
@@ -1628,6 +1663,15 @@ paths:
         '200':
           description: OK
 
+  /api/v1/cards/decks:
+    get:
+      tags: [system]
+      summary: Active ImageCardDeck list for C-end (ECR-045)
+      description: DeviceAuth · only active=true · ordered by code · deck catalog only
+      responses:
+        '200':
+          description: OK
+
   /api/v1/home/daily-tips:
     get:
       tags: [system]