merge: 合入本地 Ops 扩展与 origin/main（ECR-009–016）

保留远程用户侧 ECR-009–016 与本地 Ops 目录/RBAC/CMS/危机等能力；文档标注分叉期间 ECR 编号冲突。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/repository/scale_repo.go

@@ -122,6 +122,19 @@ func (r *ScaleRepo) ListAllAdmin(ctx context.Context) ([]ScaleAdminItem, error)
 	return out, rows.Err()
 }
 
+// GetAdmin loads one scale by id for ops read.
+func (r *ScaleRepo) GetAdmin(ctx context.Context, id uuid.UUID) (*ScaleAdminItem, error) {
+	var it ScaleAdminItem
+	err := r.Pool.QueryRow(ctx, `
+		SELECT id, slug, title, description, status FROM scales
+		WHERE id=$1 AND deleted_at IS NULL`, id,
+	).Scan(&it.ID, &it.Slug, &it.Title, &it.Description, &it.Status)
+	if err != nil {
+		return nil, err
+	}
+	return &it, nil
+}
+
 // UpdateStatus sets published|draft.
 func (r *ScaleRepo) UpdateStatus(ctx context.Context, id uuid.UUID, status string) error {
 	return r.UpdateStatusWithAudit(ctx, id, status, uuid.Nil, nil)