chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/handler/ask_feedback.go

@@ -60,6 +60,10 @@ func (h *AskHandler) SubmitFeedback(c *gin.Context) {
 			response.Fail(c, http.StatusNotFound, 40410, msg)
 			return
 		}
+		if strings.Contains(msg, "message not in thread") {
+			response.Fail(c, http.StatusBadRequest, 40030, msg)
+			return
+		}
 		response.Fail(c, http.StatusInternalServerError, 50000, msg)
 		return
 	}