chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。

Co-authored-by: Cursor <cursoragent@cursor.com>

.ai/product/feature-spec/ops-funnel-definition.md

@@ -19,8 +19,8 @@
 
 | Method | Path | 权限 | 语义 |
 |--------|------|------|------|
-| GET | `/admin/analytics/funnel-definitions` | `admin.analytics.read` | 只读 |
-| GET | `/admin/analytics/funnel-definitions/{id}` | `admin.analytics.read` | 只读 |
+| GET | `/admin/analytics/funnel-definitions` | `admin.growth.read` | 只读 |
+| GET | `/admin/analytics/funnel-definitions/{id}` | `admin.growth.read` | 只读 |
 
 ## Migration