feat(ECR-006): 落地运营后台 Phase A（admin API + admin-h5）

新增独立鉴权的 /api/v1/admin 与 Vue 控制台；会员授予与审计同事务，并补集成/单测。

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/HANDOFF/ECR-006-architect-to-engineer.md

@@ -0,0 +1,23 @@
+# HANDOFF — ECR-006 Architect → Engineer
+
+## Consume
+
+1. `.ai/product/feature-spec/ops-admin.md`（Active）  
+2. `docs/ECR/ECR-006-ops-admin-phase-a.md`  
+3. `docs/BACKEND_DESIGN/ECR-006-ops-admin-phase-a.md`（**BD-2026-006**）  
+4. `docs/ENGINEERING_SPEC/ECR-006-ops-admin-phase-a.md`  
+5. `$ESS_ROOT/technology-governance/BACKEND_STANDARD.md`（分层纪律；目录名从项目既有）  
+
+## Do
+
+按 ENGINEERING_SPEC Implement order 落地 Phase A。
+
+## Do not
+
+- 扩到 UGC / CMS / RBAC  
+- Handler → DB  
+- 用 DeviceAuth 保护 admin 路由  
+
+## Return
+
+HANDOFF engineer→reviewer + TEST_REPORT + CODE_REVIEW 勾选；STATE.owner → reviewer

docs/HANDOFF/ECR-006-engineer-to-reviewer.md

@@ -0,0 +1,17 @@
+# HANDOFF — ECR-006 Engineer → Reviewer
+
+## Done
+
+- Migration `000010_admin_ops`
+- `service/admin` · `AdminRepo` · `AdminHandler` · `AdminAuth`
+- `apps/admin-h5` Phase A pages
+- OpenAPI admin paths
+- TEST_REPORT / integration `TestAdminOpsPhaseA`
+
+## Evidence
+
+`docs/TEST_REPORT/ECR-006.md` · `docs/CODE_REVIEW/ECR-006.md`
+
+## Ask
+
+Reviewer 勾选 Approve；可 Closed ECR-006。