收口七月卡状态回调与系列授权兼容契约

完成运营商实名回调、业务事件观测序列与受控配置装配，同时恢复 UR43 已交付的 packages[].remove 字段及旧响应兼容，统一更新 OpenSpec、OpenAPI 和交付文档。

Constraint: 七月测试环境里程碑不新增或运行自动化测试

Rejected: 以必填 operation_type 替换 packages[].remove | 会破坏已交付前端契约

Confidence: high

Scope-risk: broad

Directive: 后续修改系列套餐管理接口必须保持 packages[].remove 和 ShopSeriesGrantResponse 兼容

Tested: go run ./cmd/gendocs；go build -buildvcs=false ./...；openspec validate complete-july-iteration-test-release --strict；git diff --check

Not-tested: 按本 Change 约定未运行 go test，真实运营商与 Gateway 联调延期

internal/application/systemconfig/update.go

@@ -5,7 +5,6 @@ import (
 	"context"
 	"crypto/sha256"
 	"encoding/hex"
-	stderrors "errors"
 	"time"
 
 	"gorm.io/gorm"
@@ -31,19 +30,11 @@ type ChangeAudit struct {
 	CorrelationID string
 }
 
-// AuditWriter 由 tech-global-audit 提供事务内实现。
+// AuditWriter 可选接收系统配置事务内审计事实。
 type AuditWriter interface {
 	WriteConfigChange(ctx context.Context, tx *gorm.DB, audit ChangeAudit) error
 }
 
-// UnavailableAuditWriter 是统一审计尚未注入时的失败关闭策略。
-type UnavailableAuditWriter struct{}
-
-// WriteConfigChange 拒绝在缺少统一审计时修改敏感配置。
-func (UnavailableAuditWriter) WriteConfigChange(_ context.Context, _ *gorm.DB, _ ChangeAudit) error {
-	return stderrors.New("统一审计接缝尚未配置")
-}
-
 // UpdateService 执行单 Key 校验、事务更新、审计和提交后缓存失效。
 type UpdateService struct {
 	db       *gorm.DB
@@ -63,9 +54,6 @@ func NewUpdateService(
 	alerts configinfra.AlertSink,
 	now func() time.Time,
 ) *UpdateService {
-	if audit == nil {
-		audit = UnavailableAuditWriter{}
-	}
 	if now == nil {
 		now = time.Now
 	}
@@ -133,14 +121,16 @@ func (s *UpdateService) Execute(ctx context.Context, key string, request dto.Upd
 		if value := middleware.GetRequestIDFromContext(ctx); value != nil {
 			requestID = *value
 		}
-		if err := s.audit.WriteConfigChange(ctx, tx, ChangeAudit{
-			OperatorID: operatorID, OperationType: "system_config_update", Description: "更新受控系统配置",
-			ConfigKey:  key,
-			BeforeData: map[string]any{"config_key": key, "value": auditValue(definition, beforeValue)},
-			AfterData:  map[string]any{"config_key": key, "value": auditValue(definition, request.Value)},
-			RequestID:  requestID, CorrelationID: requestID,
-		}); err != nil {
-			return err
+		if s.audit != nil {
+			if err := s.audit.WriteConfigChange(ctx, tx, ChangeAudit{
+				OperatorID: operatorID, OperationType: "system_config_update", Description: "更新受控系统配置",
+				ConfigKey:  key,
+				BeforeData: map[string]any{"config_key": key, "value": auditValue(definition, beforeValue)},
+				AfterData:  map[string]any{"config_key": key, "value": auditValue(definition, request.Value)},
+				RequestID:  requestID, CorrelationID: requestID,
+			}); err != nil {
+				return err
+			}
 		}
 		saved = existing
 		return nil