feat(ECR-015): RedemptionCode 兑换码并 Closed

批次生成/作废、C 端兑码延长会员；admin-h5 /codes。
Loop continuous。Next：ECR-016 UserIntelligence。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/service/admin/rbac.go

@@ -22,6 +22,8 @@ const (
 	PermUsersStatusWrite     = "admin.users.status.write"
 	PermMembershipPlansRead  = "admin.membership.plans.read"
 	PermMembershipPlansWrite = "admin.membership.plans.write"
+	PermMembershipCodesRead  = "admin.membership.codes.read"
+	PermMembershipCodesWrite = "admin.membership.codes.write"
 )
 
 var knownPermissions = map[string]struct{}{
@@ -29,6 +31,7 @@ var knownPermissions = map[string]struct{}{
 	PermOrdersRead: {}, PermAuditRead: {}, PermAnalyticsRead: {},
 	PermContentWrite: {}, PermRolesRead: {}, PermRolesWrite: {},
 	PermUsersStatusWrite: {}, PermMembershipPlansRead: {}, PermMembershipPlansWrite: {},
+	PermMembershipCodesRead: {}, PermMembershipCodesWrite: {},
 }
 
 var (