收口七月卡状态回调与系列授权兼容契约

完成运营商实名回调、业务事件观测序列与受控配置装配，同时恢复 UR43 已交付的 packages[].remove 字段及旧响应兼容，统一更新 OpenSpec、OpenAPI 和交付文档。

Constraint: 七月测试环境里程碑不新增或运行自动化测试

Rejected: 以必填 operation_type 替换 packages[].remove | 会破坏已交付前端契约

Confidence: high

Scope-risk: broad

Directive: 后续修改系列套餐管理接口必须保持 packages[].remove 和 ShopSeriesGrantResponse 兼容

Tested: go run ./cmd/gendocs；go build -buildvcs=false ./...；openspec validate complete-july-iteration-test-release --strict；git diff --check

Not-tested: 按本 Change 约定未运行 go test，真实运营商与 Gateway 联调延期

internal/service/iot_card/gateway_service.go

@@ -2,8 +2,12 @@ package iot_card
 
 import (
 	"context"
+	"strconv"
 
+	cardapp "github.com/break/junhong_cmp_fiber/internal/application/cardobservation"
 	"github.com/break/junhong_cmp_fiber/internal/gateway"
+	"github.com/break/junhong_cmp_fiber/internal/model"
+	"github.com/break/junhong_cmp_fiber/pkg/constants"
 	"github.com/break/junhong_cmp_fiber/pkg/errors"
 	"go.uber.org/zap"
 )
@@ -50,11 +54,35 @@ func (s *Service) GatewayQueryRealnameStatus(ctx context.Context, iccid string)
 
 // GatewayGetRealnameLink 获取实名认证跳转链接
 func (s *Service) GatewayGetRealnameLink(ctx context.Context, iccid string) (*gateway.RealnameLinkResp, error) {
-	if err := s.validateCardAccess(ctx, iccid); err != nil {
+	card, err := s.iotCardStore.GetByICCID(ctx, iccid)
+	if err != nil {
+		return nil, errors.New(errors.CodeNotFound, "卡不存在或无权限访问")
+	}
+	response, err := s.gatewayClient.GetRealnameLink(ctx, &gateway.CardStatusReq{
+		CardNo: iccid,
+	})
+	if err != nil {
 		return nil, err
 	}
-	return s.gatewayClient.GetRealnameLink(ctx, &gateway.CardStatusReq{
-		CardNo: iccid,
+	s.dispatchAdminRealnameObservation(ctx, card)
+	return response, nil
+}
+
+func (s *Service) dispatchAdminRealnameObservation(ctx context.Context, card *model.IotCard) {
+	if s.observationSeries == nil || card == nil {
+		return
+	}
+	requestID := requestIDFromContext(ctx)
+	s.observationSeries.DispatchRealnameWithCapability(ctx, cardapp.RealnameCapabilitySeriesRequest{
+		CarrierID: card.CarrierID,
+		Request: cardapp.SeriesRequest{
+			Scene:         constants.CardObservationSceneAdminRealnameLink,
+			ResourceType:  constants.CardObservationResourceTypeCard,
+			ResourceID:    strconv.FormatUint(uint64(card.ID), 10),
+			SyncType:      constants.CardObservationSyncTypeRealname,
+			ExpectedValue: "verified", Source: constants.CardObservationSourceBusinessEvent,
+			RequestID: requestID, CorrelationID: requestID,
+		},
 	})
 }