chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。

Co-authored-by: Cursor <cursoragent@cursor.com>

.ai/product/feature-spec/ops-scale-definition.md

@@ -19,8 +19,9 @@ PATCH status（已有 content.write）· 题干编辑 · UGC · 真支付
 
 | Method | Path | 权限 | 语义 |
 |--------|------|------|------|
-| GET | `/admin/explore/scales` | `admin.explore.read` | 只读 |
-| GET | `/admin/explore/scales/{id}` | `admin.explore.read` | 只读 |
+| GET | `/admin/explore/scales` | `admin.explore.read` 或 `admin.content.write` | 只读 |
+| GET | `/admin/explore/scales/{id}` | `admin.explore.read` 或 `admin.content.write` | 只读 |
+| GET | `/admin/scales` | `admin.explore.read` 或 `admin.content.write` | 只读（与 explore 同源） |
 
 ## Migration