chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/repository/scale_repo.go

@@ -106,7 +106,7 @@ type ScaleAdminItem struct {
 func (r *ScaleRepo) ListAllAdmin(ctx context.Context) ([]ScaleAdminItem, error) {
 	rows, err := r.Pool.Query(ctx, `
 		SELECT id, slug, title, description, status FROM scales
-		WHERE deleted_at IS NULL ORDER BY created_at`)
+		WHERE deleted_at IS NULL ORDER BY created_at LIMIT 500`)
 	if err != nil {
 		return nil, err
 	}