feat(ECR-010): Ops-E 系统运营；修复登出解绑；P2 Complete

落地管理员 RBAC/封禁/推送任务 stub，logout 解绑 device 并统一各页 ensureAccount，同时收口 P2 生日生成与状态文档。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin-h5/src/router/index.ts

@@ -1,5 +1,6 @@
 import { createRouter, createWebHistory } from 'vue-router'
 import { getToken } from '@/api/client'
+import { useAuthStore } from '@/stores/auth'
 
 const router = createRouter({
   history: createWebHistory(import.meta.env.BASE_URL),
@@ -15,16 +16,23 @@ const router = createRouter({
         { path: 'users', name: 'users', component: () => import('@/pages/UsersPage.vue') },
         { path: 'users/:id', name: 'user', component: () => import('@/pages/UserDetailPage.vue') },
         { path: 'orders', name: 'orders', component: () => import('@/pages/OrdersPage.vue') },
-        { path: 'pricing', name: 'pricing', component: () => import('@/pages/PricingPage.vue') },
+        { path: 'pricing', name: 'pricing', component: () => import('@/pages/PricingPage.vue'), meta: { superOnly: true } },
+        { path: 'push', name: 'push', component: () => import('@/pages/PushJobsPage.vue') },
+        { path: 'admins', name: 'admins', component: () => import('@/pages/AdminsPage.vue'), meta: { superOnly: true } },
         { path: 'audit', name: 'audit', component: () => import('@/pages/AuditPage.vue') },
       ],
     },
   ],
 })
 
-router.beforeEach((to) => {
+router.beforeEach(async (to) => {
   if (to.meta.public) return true
   if (!getToken()) return { name: 'login', query: { redirect: to.fullPath } }
+  if (to.meta.superOnly) {
+    const auth = useAuthStore()
+    if (!auth.username) await auth.hydrate()
+    if (!auth.isSuper) return { name: 'dashboard' }
+  }
   return true
 })