收口七月卡状态回调与系列授权兼容契约

完成运营商实名回调、业务事件观测序列与受控配置装配，同时恢复 UR43 已交付的 packages[].remove 字段及旧响应兼容，统一更新 OpenSpec、OpenAPI 和交付文档。

Constraint: 七月测试环境里程碑不新增或运行自动化测试

Rejected: 以必填 operation_type 替换 packages[].remove | 会破坏已交付前端契约

Confidence: high

Scope-risk: broad

Directive: 后续修改系列套餐管理接口必须保持 packages[].remove 和 ShopSeriesGrantResponse 兼容

Tested: go run ./cmd/gendocs；go build -buildvcs=false ./...；openspec validate complete-july-iteration-test-release --strict；git diff --check

Not-tested: 按本 Change 约定未运行 go test，真实运营商与 Gateway 联调延期

pkg/logger/access_policy.go

@@ -34,6 +34,10 @@ var (
 		Name: "wecom_callback", Sensitive: true,
 		SafeFields: fieldSet("event_type", "resource_type", "resource_id", "result_code", "status"),
 	}
+	carrierCallbackPolicy = AccessPolicy{
+		Name: "carrier_callback", Sensitive: true, PresenceOnly: true,
+		ResultFields: fieldSet("code", "msg", "timestamp"),
+	}
 	configPolicy = AccessPolicy{
 		Name: "sensitive_config", Sensitive: true, PresenceOnly: true,
 		SafeFields:   fieldSet("config_key", "value_type", "module", "readonly", "sensitive", "configured", "status", "result_code"),
@@ -64,6 +68,8 @@ func policyForPath(path string) AccessPolicy {
 		return configPolicy
 	case strings.Contains(normalized, "/callback") && (strings.Contains(normalized, "wecom") || strings.Contains(normalized, "wework")):
 		return wecomPolicy
+	case strings.Contains(normalized, "/callback/carriers/"):
+		return carrierCallbackPolicy
 	case strings.Contains(normalized, "payment"), strings.Contains(normalized, "wechat-pay"),
 		strings.Contains(normalized, "alipay"), strings.Contains(normalized, "fuiou-pay"):
 		return paymentPolicy