feat(ECR-043): StarConfig 写面闭环并 Closed

加法权限 admin.explore.write、POST/PUT+审计、C端 GET /star/configs、
H5 无 active 空态/失败回退；migration 000052。ExploreConfig Loop STOP，禁自动 ECR-044。

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/TRACEABILITY.md

@@ -4,8 +4,8 @@
 
 | Anchor | Value | Rule |
 |--------|-------|------|
-| **Next ECR** | `ECR-044` | **冻结：** 043 Closed 前勿占；043 Closed 后须重新 Candidate Review，禁止自动开刀 |
-| **Max Migration** | `000051` | ECR-043 编码时占 `000052`；禁止凭记忆 |
+| **Next ECR** | `ECR-044` | **冻结：** 须重新 Candidate Review + Human 单独拍板；**禁止自动开刀** |
+| **Max Migration** | `000052` | 禁止凭记忆 |
 
 - ECR identity **全局唯一**（含已 Closed）；禁止同号双义。分叉只用 `ECR-NNN-suffix` / `ECR-NNNA`。  
 - Migration **6 位版本号唯一**。撞号修复见 `docs/MIGRATION_RENUMBER.md`。  
@@ -67,7 +67,7 @@
 | WRITE-WAVE | Ops CMS 写面（041–042） | **CMS 段 Closed** | `WRITE_WAVE_AUTHORIZATION.md` |
 | ECR-041 | OpsCMS · Banner 薄写面 | **Closed** | Spec ops-banner-write · BD-2026-041 · migration **000051** |
 | ECR-042 | OpsCMS · FeedSlot 薄写面 | **Closed** | Spec ops-feed-slot-write · BD-2026-042 · 无新 migration · 复用 cms.write |
-| EXPLORE-WRITE | ExploreConfig 写面授权 | **Approved · 仅 ECR-043** | `EXPLORE_CONFIG_WRITE_AUTHORIZATION.md` |
-| ECR-043 | ExploreConfig · StarConfig 薄写面 | **Approved · Coding NOT STARTED** | Spec ops-star-config-write · BD-2026-043 · Closed 后 STOP |
+| EXPLORE-WRITE | ExploreConfig 写面授权 | **Approved · 仅 ECR-043 · Closed 后 STOP** | `EXPLORE_CONFIG_WRITE_AUTHORIZATION.md` |
+| ECR-043 | ExploreConfig · StarConfig 薄写面 | **Closed** | Spec ops-star-config-write · BD-2026-043 · migration **000052** · Closed 后 STOP · 禁自动 ECR-044 |
 
 > **Migration：** 合并后 `000015`–`000023` 曾撞号，已重编号至 `000050`。以 `apps/api/migrations/` 与 `docs/MIGRATION_RENUMBER.md` 为准（文档中旧号引用可能滞后）。