feat(ECR-037): ExploreConfig ImageCardDeck 只读并 Closed

ImageCardDeck catalog (000038) · Loop continuous.

.ai/product/feature-spec/README.md

@@ -46,6 +46,7 @@
 | [ops-privacy-request.md](ops-privacy-request.md) | AdminGovernance PrivacyRequest | §7 | `GET /admin/privacy/requests*` | Ops-D · **ECR-034 Closed** |
 | [ops-star-config.md](ops-star-config.md) | ExploreConfig StarConfig | §7 | `GET /admin/explore/star-configs*` | Ops-D · **ECR-035 Closed** |
 | [ops-rhythm-config.md](ops-rhythm-config.md) | ExploreConfig RhythmConfig | §7 | `GET /admin/explore/rhythm-configs*` | Ops-D · **ECR-036 Closed** |
+| [ops-image-card-deck.md](ops-image-card-deck.md) | ExploreConfig ImageCardDeck | §7 | `GET /admin/explore/image-card-decks*` | Ops-D · **ECR-037 Closed** |
 
 新功能：复制 `_TEMPLATE.md` → 填满 → 在本表登记 → 再编码。
 

.ai/product/feature-spec/ops-image-card-deck.md

@@ -0,0 +1,41 @@
+# Feature Spec: ExploreConfig · ImageCardDeck（Ops · ECR-037）
+
+> Status: `Active`（Loop continuous · **ECR-037 Closed**）  
+> Parent: WAVE0-FROZEN · Predecessor: ECR-036 Closed  
+> Capability: `ExploreConfig` · BC: `Explore_Reports`  
+> 授权：`docs/WAVE0/LOOP_AUTHORIZATION.md`
+
+## Non-goals
+
+牌组写发布 · UGC · 真支付
+
+## L2 Domain
+
+| 概念 | 语义 |
+|------|------|
+| `ImageCardDeck` | 本切片只读目录；code 唯一（若适用） |
+
+## L3 API
+
+| Method | Path | 权限 | 语义 |
+|--------|------|------|------|
+| GET | `/admin/explore/image-card-decks` | `admin.explore.read` | 只读 |
+| GET | `/admin/explore/image-card-decks/{id}` | `admin.explore.read` | 只读 |
+
+## Migration
+
+`000038`：表 + 种子（若有）（权限复用）
+
+## L4 AC
+
+| ID | Then |
+|----|------|
+| AC-F-01 | list 含种子或空列表合法 |
+| AC-F-02 | 已知 id get 200 |
+| AC-F-03 | 未知 id → 404 |
+| AC-S-01 | 无 Admin → 401 |
+| AC-S-02 | 无权限 → 403 |
+| AC-P-01 | list < 500ms |
+| AC-O-01 | N/A 只读 |
+
+contract_diff: `docs/CONTRACT_DIFF/ECR-037.yaml`