收口七月卡状态回调与系列授权兼容契约

完成运营商实名回调、业务事件观测序列与受控配置装配，同时恢复 UR43 已交付的 packages[].remove 字段及旧响应兼容，统一更新 OpenSpec、OpenAPI 和交付文档。

Constraint: 七月测试环境里程碑不新增或运行自动化测试

Rejected: 以必填 operation_type 替换 packages[].remove | 会破坏已交付前端契约

Confidence: high

Scope-risk: broad

Directive: 后续修改系列套餐管理接口必须保持 packages[].remove 和 ShopSeriesGrantResponse 兼容

Tested: go run ./cmd/gendocs；go build -buildvcs=false ./...；openspec validate complete-july-iteration-test-release --strict；git diff --check

Not-tested: 按本 Change 约定未运行 go test，真实运营商与 Gateway 联调延期

docs/admin-openapi.yaml

@@ -3939,18 +3939,25 @@ components:
                     nullable: true
                     type: integer
                 packages:
-                    description: 初始授权套餐列表
+                    description: 初始授权套餐列表（1～100项，套餐ID不可重复）
                     items:
                         $ref: '#/components/schemas/DtoGrantPackageItem'
+                    maxItems: 100
+                    minItems: 1
+                    nullable: true
                     type: array
                 series_id:
                     description: 套餐系列ID
-                    minimum: 0
+                    minimum: 1
                     type: integer
                 shop_id:
                     description: 被授权代理店铺ID
-                    minimum: 0
+                    minimum: 1
                     type: integer
+            required:
+                - shop_id
+                - series_id
+                - packages
             type: object
         DtoCreateWechatConfigRequest:
             properties:
@@ -5724,16 +5731,20 @@ components:
         DtoGrantPackageItem:
             properties:
                 cost_price:
-                    description: 成本价（分）
+                    description: 成本价（分），新增或调价时必填
+                    minimum: 0
+                    nullable: true
                     type: integer
                 package_id:
                     description: 套餐ID
-                    minimum: 0
+                    minimum: 1
                     type: integer
                 remove:
                     description: 是否删除该套餐授权（true=删除）
                     nullable: true
                     type: boolean
+            required:
+                - package_id
             type: object
         DtoImportDeviceRequest:
             properties:
@@ -6239,11 +6250,15 @@ components:
                     nullable: true
                     type: string
                 packages:
-                    description: 套餐操作列表
+                    description: 套餐操作列表（1～100项，套餐ID不可重复）
                     items:
                         $ref: '#/components/schemas/DtoGrantPackageItem'
+                    maxItems: 100
+                    minItems: 1
                     nullable: true
                     type: array
+            required:
+                - packages
             type: object
         DtoManualTriggerLogListResp:
             properties:
@@ -29216,6 +29231,82 @@ paths:
             summary: 支付宝回调
             tags:
                 - 支付回调
+    /api/callback/carriers/cmcc/realname:
+        post:
+            description: 接收中国移动 JSON 实名成功结果，固定返回运营商成功应答。
+            responses:
+                "400":
+                    content:
+                        application/json:
+                            schema:
+                                $ref: '#/components/schemas/ErrorResponse'
+                    description: 请求参数错误
+                "500":
+                    content:
+                        application/json:
+                            schema:
+                                $ref: '#/components/schemas/ErrorResponse'
+                    description: 服务器内部错误
+            summary: 移动实名结果回调
+            tags:
+                - 运营商回调
+    /api/callback/carriers/ctcc/realname:
+        post:
+            description: 接收电信 XML 实名补录结果，固定返回运营商成功应答。
+            responses:
+                "400":
+                    content:
+                        application/json:
+                            schema:
+                                $ref: '#/components/schemas/ErrorResponse'
+                    description: 请求参数错误
+                "500":
+                    content:
+                        application/json:
+                            schema:
+                                $ref: '#/components/schemas/ErrorResponse'
+                    description: 服务器内部错误
+            summary: 电信实名结果回调
+            tags:
+                - 运营商回调
+    /api/callback/carriers/cucc/realname:
+        post:
+            description: 接收中国联通嵌套 JSON 实名成功结果，固定返回运营商成功应答。
+            responses:
+                "400":
+                    content:
+                        application/json:
+                            schema:
+                                $ref: '#/components/schemas/ErrorResponse'
+                    description: 请求参数错误
+                "500":
+                    content:
+                        application/json:
+                            schema:
+                                $ref: '#/components/schemas/ErrorResponse'
+                    description: 服务器内部错误
+            summary: 联通实名结果回调
+            tags:
+                - 运营商回调
+    /api/callback/carriers/cucc/realname/remove:
+        post:
+            description: 识别中国联通解除实名 JSON，仅留痕且不修改本地实名事实。
+            responses:
+                "400":
+                    content:
+                        application/json:
+                            schema:
+                                $ref: '#/components/schemas/ErrorResponse'
+                    description: 请求参数错误
+                "500":
+                    content:
+                        application/json:
+                            schema:
+                                $ref: '#/components/schemas/ErrorResponse'
+                    description: 服务器内部错误
+            summary: 联通解除实名回调
+            tags:
+                - 运营商回调
     /api/callback/fuiou-pay:
         post:
             responses: