feat(ECR-006): 落地运营后台 Phase A（admin API + admin-h5）

新增独立鉴权的 /api/v1/admin 与 Vue 控制台；会员授予与审计同事务，并补集成/单测。

Co-authored-by: Cursor <cursoragent@cursor.com>

.ai/architecture.md

@@ -6,14 +6,16 @@ Domain / ERD：[domain/domain-map.md](domain/domain-map.md) · [domain/erd.md](d
 ## Allowed call graph
 
 ```
-UI (user-h5 / mini-program)
-  → packages/sdk
+UI (user-h5 / mini-program / admin-h5)
+  → packages/sdk（或 admin 薄 api 客户端）
   → API Handler
   → Service
   → Repository
   → Database
 ```
 
+Admin 路由挂 `/api/v1/admin/*`，鉴权与终端 `DeviceAuth` **隔离**（见 `feature-spec/ops-admin.md`）。
+
 ## Forbidden
 
 - Handler → Database (skip Service/Repository)
@@ -30,7 +32,7 @@ UI (user-h5 / mini-program)
 | `apps/api` | Only backend |
 | `apps/user-h5` | Primary client (Vue3+TS) |
 | `apps/mini-program` | Scaffold only until tasked |
-| `apps/admin-h5` | Deferred |
+| `apps/admin-h5` | Ops Phase A（ECR-006） |
 | `packages/sdk` | Multi-platform HTTP client |
 | `packages/types` | Shared TS types |
 | `packages/utils` | Pure helpers |