feat(ECR-023): AICoreConfig KnowledgeSource 只读并 Closed

运营可观测知识源目录（knowledge_sources + admin /ai），不含 Chunk/Embedding。

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/TEST_REPORT/ECR-023.md

@@ -0,0 +1,33 @@
+# TEST_REPORT — ECR-023 KnowledgeSource
+
+Date: 2026-08-08 · Loop continuous · commit: `PENDING`
+
+## Commands
+
+```bash
+cd apps/api && go test ./internal/integration/ -run TestAICoreKnowledgeSources -count=1
+npm run build:admin
+python3 scripts/ess-validate.py --phase review --ecr ECR-023
+python3 scripts/ess-gate-check.py --ecr ECR-023
+```
+
+## Results
+
+| Check | Result |
+|-------|--------|
+| TestAICoreKnowledgeSources | PASS |
+| build:admin | PASS |
+| ess-validate review | PASS |
+| ess-gate-check | PASS |
+
+## AC
+
+| ID | Evidence |
+|----|----------|
+| AC-F-01 | list 含 ask_grounding |
+| AC-F-02 | get source_kind 合法 |
+| AC-F-03 | 未知 id → 404 |
+| AC-S-01 | 无 token → 401 |
+| AC-S-02 | 仅 users.read → 403 |
+| AC-P-01 | list < 500ms |
+| AC-O-01 | N/A 只读 |