feat(ECR-013B): AccountLifecycle Closed；启用 Loop 连续执行

UserStatus 迁移、DeviceAuth 拒绝非 active、admin-h5 CTA；
Reviewer Closed。Human 授权 LOOP_AUTHORIZATION（免逐闸确认）。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin-h5/src/api/client.ts

@@ -117,6 +117,19 @@ export const adminApi = {
   users: (q = '') =>
     request<{ items: UserListItem[] }>('GET', `/users?q=${encodeURIComponent(q)}`),
   user: (id: string) => request<UserDetail>('GET', `/users/${id}`),
+  setUserStatus: (id: string, status: string, reason: string) =>
+    request<UserDetail>('POST', `/users/${id}/status`, { status, reason }),
+  statusTransitions: (id: string) =>
+    request<{
+      items: Array<{
+        id: string
+        from_status: string
+        to_status: string
+        admin_id: string
+        reason: string
+        created_at: string
+      }>
+    }>('GET', `/users/${id}/status-transitions`),
   grant: (id: string, plan: string) =>
     request<{ ok: boolean }>('POST', `/users/${id}/membership/grant`, { plan }),
   grantAskQuota: (id: string, delta: number) =>