fix(治理): 完成任务 8 安全与通知闭环修复

- 串行化拉黑、处罚、投瓶和匹配策略检查\n- 完成异步站内通知、未读统计和偏好并发语义\n- 补齐后台查询审计、处罚恢复和隐私测试\n- 稳定 Redis 恢复、匹配锁序及超时测试

apps/api/src/admin/admin.controller.ts

@@ -25,8 +25,11 @@ import {
 @UseGuards(AuthGuard, AdminGuard)
 export class AdminController {
   constructor(@Inject(AdminService) private readonly admin: AdminService) {}
-  @Get("reports") reports(@Query() q: AdminQueryDto) {
-    return this.admin.reports(q.status, q.limit);
+  @Get("reports") reports(
+    @CurrentUser() u: AccessClaims,
+    @Query() q: AdminQueryDto,
+  ) {
+    return this.admin.reports(u.sub, q.status, q.limit);
   }
   @UseGuards(StateChangingOriginGuard) @Post("reports/:id/resolve") resolve(
     @CurrentUser() u: AccessClaims,
@@ -35,8 +38,11 @@ export class AdminController {
   ) {
     return this.admin.resolve(u.sub, id, d);
   }
-  @Get("moderation") moderation(@Query() q: AdminQueryDto) {
-    return this.admin.moderation(q.limit);
+  @Get("moderation") moderation(
+    @CurrentUser() u: AccessClaims,
+    @Query() q: AdminQueryDto,
+  ) {
+    return this.admin.moderation(u.sub, q.limit);
   }
   @UseGuards(StateChangingOriginGuard) @Post("moderation/:id/resolve") moderate(
     @CurrentUser() u: AccessClaims,
@@ -58,7 +64,7 @@ export class AdminController {
 
 Reflect.defineMetadata(
   "design:paramtypes",
-  [AdminQueryDto],
+  [Object, AdminQueryDto],
   AdminController.prototype,
   "reports",
 );
@@ -70,7 +76,7 @@ Reflect.defineMetadata(
 );
 Reflect.defineMetadata(
   "design:paramtypes",
-  [AdminQueryDto],
+  [Object, AdminQueryDto],
   AdminController.prototype,
   "moderation",
 );