feat(ECR-043): StarConfig 写面闭环并 Closed

加法权限 admin.explore.write、POST/PUT+审计、C端 GET /star/configs、
H5 无 active 空态/失败回退；migration 000052。ExploreConfig Loop STOP，禁自动 ECR-044。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/handler/star_config_public.go

@@ -0,0 +1,36 @@
+package handler
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/yuxingu/digital-psychology/apps/api/internal/repository"
+	"github.com/yuxingu/digital-psychology/apps/api/pkg/response"
+)
+
+// StarConfigPublicHandler serves GET /api/v1/star/configs (DeviceAuth).
+type StarConfigPublicHandler struct {
+	Repo *repository.AdminRepo
+}
+
+// Register mounts public star config routes.
+func (h *StarConfigPublicHandler) Register(api *gin.RouterGroup) {
+	api.GET("/star/configs", h.ListActive)
+}
+
+func (h *StarConfigPublicHandler) ListActive(c *gin.Context) {
+	if h.Repo == nil {
+		response.OK(c, gin.H{"items": []repository.StarConfigRow{}})
+		return
+	}
+	items, err := h.Repo.ListActiveStarConfigs(c.Request.Context())
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50054, "star configs failed")
+		return
+	}
+	if items == nil {
+		items = []repository.StarConfigRow{}
+	}
+	response.OK(c, gin.H{"items": items})
+}