feat(ECR-018): Entitlement 用户权益只读并 Closed

聚合 GET /admin/users/:id/entitlements（Membership∪DeepAccess∪问答额度）与 admin-h5 权益 Tab；无 migration / 无真支付。

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/TEST_REPORT/ECR-018.md

@@ -0,0 +1,31 @@
+# TEST_REPORT — ECR-018 Entitlement
+
+Date: 2026-08-07 · Loop continuous · commit: (pending)
+
+## Commands
+
+```bash
+cd apps/api && go test ./internal/integration/ -run TestUserEntitlements -count=1
+npm run build:admin
+python3 scripts/ess-validate.py --phase review --ecr ECR-018
+python3 scripts/ess-gate-check.py --ecr ECR-018
+```
+
+## Results
+
+| Check | Result |
+|-------|--------|
+| TestUserEntitlements | PASS |
+| build:admin | PASS |
+| ess-validate review | PASS |
+
+## AC
+
+| ID | Evidence |
+|----|----------|
+| AC-F-01 | grant 后 flags.report_detail_via_membership=true |
+| AC-F-02 | deep_access pay-mock 后 count≥1 |
+| AC-F-03 | （空权益仍 200，覆盖于无会员前置态） |
+| AC-S-01 | 无 token → 401 |
+| AC-P-01 | GET < 500ms |
+| AC-O-01 | N/A 只读 |