feat(ECR-019): ContentSafety FilterRule 只读并 Closed

新增 filter_rules、admin.content_safety.read、列表/详情/试匹配 API 与 admin-h5「安全」页；禁审核写/UGC/真支付。

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/CONTRACT_DIFF/ECR-019.yaml

@@ -0,0 +1,26 @@
+ecr: ECR-019
+capability: ContentSafety
+bounded_context: Content_Safety
+parent: WAVE0-FROZEN
+predecessor: ECR-018
+change:
+  type: additive
+breaking_change: false
+migration_required: true
+compatibility_notes: >
+  Adds filter_rules table with system seeds and read/evaluate admin APIs.
+  No ModerationCase / Crisis write paths.
+
+apis:
+  - method: GET
+    path: /api/v1/admin/content-safety/filter-rules
+    change: added
+  - method: GET
+    path: /api/v1/admin/content-safety/filter-rules/{id}
+    change: added
+  - method: POST
+    path: /api/v1/admin/content-safety/evaluate
+    change: added
+perms:
+  - code: admin.content_safety.read
+    change: added