feat(ECR-006): 落地运营后台 Phase A（admin API + admin-h5）

新增独立鉴权的 /api/v1/admin 与 Vue 控制台；会员授予与审计同事务，并补集成/单测。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/middleware/admin_auth_test.go

@@ -0,0 +1,21 @@
+package middleware
+
+import "testing"
+
+func TestBearerToken(t *testing.T) {
+	cases := []struct {
+		in, want string
+	}{
+		{"", ""},
+		{"adm_abc", "adm_abc"},
+		{"Bearer adm_x", "adm_x"},
+		{"bearer adm_y", "adm_y"},
+		{"BEARER adm_z", "adm_z"},
+		{"  Bearer  adm_w  ", "adm_w"},
+	}
+	for _, tc := range cases {
+		if got := BearerToken(tc.in); got != tc.want {
+			t.Fatalf("BearerToken(%q)=%q want %q", tc.in, got, tc.want)
+		}
+	}
+}