chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/handler/admin_quality_feedback.go

@@ -68,6 +68,10 @@ func (h *AdminHandler) CreateAskFeedback(c *gin.Context) {
 		response.Fail(c, http.StatusNotFound, 40402, "ask thread not found")
 		return
 	}
+	if errors.Is(err, admin.ErrMessageNotInThread) {
+		response.Fail(c, http.StatusBadRequest, 40030, "message not in thread")
+		return
+	}
 	if err != nil {
 		response.Fail(c, http.StatusInternalServerError, 50026, "create feedback failed")
 		return