收口七月卡状态回调与系列授权兼容契约

完成运营商实名回调、业务事件观测序列与受控配置装配，同时恢复 UR43 已交付的 packages[].remove 字段及旧响应兼容，统一更新 OpenSpec、OpenAPI 和交付文档。

Constraint: 七月测试环境里程碑不新增或运行自动化测试

Rejected: 以必填 operation_type 替换 packages[].remove | 会破坏已交付前端契约

Confidence: high

Scope-risk: broad

Directive: 后续修改系列套餐管理接口必须保持 packages[].remove 和 ShopSeriesGrantResponse 兼容

Tested: go run ./cmd/gendocs；go build -buildvcs=false ./...；openspec validate complete-july-iteration-test-release --strict；git diff --check

Not-tested: 按本 Change 约定未运行 go test，真实运营商与 Gateway 联调延期

internal/routes/order.go

@@ -52,6 +52,42 @@ func registerAdminOrderRoutes(router fiber.Router, handler *admin.OrderHandler,
 	})
 }
 
+// registerCarrierCallbackRoutes 注册运营商业务回调路由。
+func registerCarrierCallbackRoutes(router fiber.Router, handler *callback.CTCCRealnameHandler, doc *openapi.Generator, basePath string) {
+	Register(router, doc, basePath, "POST", "/carriers/ctcc/realname", handler.Realname, RouteSpec{
+		Summary:     "电信实名结果回调",
+		Description: "接收电信 XML 实名补录结果，固定返回运营商成功应答。",
+		Tags:        []string{"运营商回调"},
+		Input:       nil,
+		Output:      nil,
+		Auth:        false,
+	})
+}
+
+// registerCMCCCallbackRoutes 注册中国移动实名回调路由。
+func registerCMCCCallbackRoutes(router fiber.Router, handler *callback.CMCCRealnameHandler, doc *openapi.Generator, basePath string) {
+	Register(router, doc, basePath, "POST", "/carriers/cmcc/realname", handler.Realname, RouteSpec{
+		Summary: "移动实名结果回调", Description: "接收中国移动 JSON 实名成功结果，固定返回运营商成功应答。",
+		Tags: []string{"运营商回调"}, Input: nil, Output: nil, Auth: false,
+	})
+}
+
+// registerCUCCRealnameCallbackRoutes 注册中国联通实名成功回调路由。
+func registerCUCCRealnameCallbackRoutes(router fiber.Router, handler *callback.CUCCRealnameHandler, doc *openapi.Generator, basePath string) {
+	Register(router, doc, basePath, "POST", "/carriers/cucc/realname", handler.Realname, RouteSpec{
+		Summary: "联通实名结果回调", Description: "接收中国联通嵌套 JSON 实名成功结果，固定返回运营商成功应答。",
+		Tags: []string{"运营商回调"}, Input: nil, Output: nil, Auth: false,
+	})
+}
+
+// registerCUCCCallbackRoutes 注册中国联通解除实名回调路由。
+func registerCUCCCallbackRoutes(router fiber.Router, handler *callback.CUCCRealnameRemovalHandler, doc *openapi.Generator, basePath string) {
+	Register(router, doc, basePath, "POST", "/carriers/cucc/realname/remove", handler.Remove, RouteSpec{
+		Summary: "联通解除实名回调", Description: "识别中国联通解除实名 JSON，仅留痕且不修改本地实名事实。",
+		Tags: []string{"运营商回调"}, Input: nil, Output: nil, Auth: false,
+	})
+}
+
 // registerPaymentCallbackRoutes 注册支付回调路由
 func registerPaymentCallbackRoutes(router fiber.Router, handler *callback.PaymentHandler, doc *openapi.Generator, basePath string) {
 	Register(router, doc, basePath, "POST", "/wechat-pay", handler.WechatPayCallback, RouteSpec{

internal/routes/routes.go

@@ -46,4 +46,20 @@ func RegisterRoutesWithDoc(app *fiber.App, handlers *bootstrap.Handlers, middlew
 		callbackGroup := app.Group("/api/callback")
 		registerPaymentCallbackRoutes(callbackGroup, handlers.PaymentCallback, doc, "/api/callback")
 	}
+	if handlers.CTCCRealnameCallback != nil {
+		callbackGroup := app.Group("/api/callback")
+		registerCarrierCallbackRoutes(callbackGroup, handlers.CTCCRealnameCallback, doc, "/api/callback")
+	}
+	if handlers.CMCCRealnameCallback != nil {
+		callbackGroup := app.Group("/api/callback")
+		registerCMCCCallbackRoutes(callbackGroup, handlers.CMCCRealnameCallback, doc, "/api/callback")
+	}
+	if handlers.CUCCRealnameCallback != nil {
+		callbackGroup := app.Group("/api/callback")
+		registerCUCCRealnameCallbackRoutes(callbackGroup, handlers.CUCCRealnameCallback, doc, "/api/callback")
+	}
+	if handlers.CUCCRealnameRemovalCallback != nil {
+		callbackGroup := app.Group("/api/callback")
+		registerCUCCCallbackRoutes(callbackGroup, handlers.CUCCRealnameRemovalCallback, doc, "/api/callback")
+	}
 }