chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。

Co-authored-by: Cursor <cursoragent@cursor.com>

.ai/product/feature-spec/ops-ask-operations.md

@@ -21,7 +21,8 @@
 | Method | Path | 权限 | 语义 |
 |--------|------|------|------|
 | GET | `/admin/ask/threads` | `admin.ask.read` | 列表（可选 `user_id`） |
-| GET | `/admin/ask/threads/:id` | `admin.ask.read` | 详情含消息 |
+| GET | `/admin/ask/threads/:id` | `admin.ask.read` | 会话 meta（不含原文） |
+| GET | `/admin/ask/threads/:id/messages` | `admin.ask.transcript.read` | 对话原文（审计 `ask.transcript.read`） |
 
 ## Migration
 

.ai/product/feature-spec/ops-funnel-definition.md

@@ -19,8 +19,8 @@
 
 | Method | Path | 权限 | 语义 |
 |--------|------|------|------|
-| GET | `/admin/analytics/funnel-definitions` | `admin.analytics.read` | 只读 |
-| GET | `/admin/analytics/funnel-definitions/{id}` | `admin.analytics.read` | 只读 |
+| GET | `/admin/analytics/funnel-definitions` | `admin.growth.read` | 只读 |
+| GET | `/admin/analytics/funnel-definitions/{id}` | `admin.growth.read` | 只读 |
 
 ## Migration
 

.ai/product/feature-spec/ops-scale-definition.md

@@ -19,8 +19,9 @@ PATCH status（已有 content.write）· 题干编辑 · UGC · 真支付
 
 | Method | Path | 权限 | 语义 |
 |--------|------|------|------|
-| GET | `/admin/explore/scales` | `admin.explore.read` | 只读 |
-| GET | `/admin/explore/scales/{id}` | `admin.explore.read` | 只读 |
+| GET | `/admin/explore/scales` | `admin.explore.read` 或 `admin.content.write` | 只读 |
+| GET | `/admin/explore/scales/{id}` | `admin.explore.read` 或 `admin.content.write` | 只读 |
+| GET | `/admin/scales` | `admin.explore.read` 或 `admin.content.write` | 只读（与 explore 同源） |
 
 ## Migration