chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin-h5/src/api/client.ts

@@ -272,8 +272,18 @@ export const adminApi = {
       message_count: number
       created_at: string
       updated_at: string
-      messages: Array<{ id: string; role: string; content: string; created_at: string }>
     }>('GET', `/ask/threads/${id}`),
+  askThreadMessages: (id: string) =>
+    request<{
+      id: string
+      user_id: string
+      profile_id: string
+      scene?: string
+      message_count: number
+      created_at: string
+      updated_at: string
+      messages: Array<{ id: string; role: string; content: string; created_at: string }>
+    }>('GET', `/ask/threads/${id}/messages`),
   filterRules: () =>
     request<{
       items: Array<{
@@ -482,7 +492,7 @@ export const adminApi = {
     request<Record<string, unknown>>('GET', `/ai/tools/${id}`),
   blockPolicies: () =>
     request<{ items: Array<Record<string, unknown>> }>('GET', '/content-safety/block-policies'),
-  blockPolicie: (id: string) =>
+  blockPolicy: (id: string) =>
     request<Record<string, unknown>>('GET', `/content-safety/block-policies/${id}`),
   cases: () =>
     request<{ items: Array<Record<string, unknown>> }>('GET', '/content-safety/cases'),