feat: 资产标识符标准化、资产历史订单查询及导入虚拟号强制验证

主要变更：
- 新增 AssetIdentifier 模型及 Store，统一管理资产标识符（ICCID/IMEI/SN 等）
- 新增迁移：asset_identifier 表、order 表新增 asset_identifier 字段、iot_card.virtual_no NOT NULL 约束
- 资产 Handler/Service/Route 全面重构，支持标识符路由查询与解析
- 新增资产历史订单查询接口，支持跨设备/卡/钱包维度的订单聚合
- 设备与物联卡导入任务强制校验虚拟号，缺失时直接拒绝
- Excel 工具函数优化，前端导入指引文档同步更新
- 归档三个 OpenSpec 提案：asset-identifier-standardization、asset-historical-orders、import-mandatory-virtual-no
- 更新 OpenAPI 文档及相关 DTO

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

internal/task/device_import.go

@@ -35,6 +35,7 @@ type DeviceImportHandler struct {
 	deviceSimBindingStore *postgres.DeviceSimBindingStore
 	iotCardStore          *postgres.IotCardStore
 	assetWalletStore      *postgres.AssetWalletStore
+	assetIdentifierStore  *postgres.AssetIdentifierStore
 	storageService        *storage.Service
 	logger                *zap.Logger
 }
@@ -47,6 +48,7 @@ func NewDeviceImportHandler(
 	deviceSimBindingStore *postgres.DeviceSimBindingStore,
 	iotCardStore *postgres.IotCardStore,
 	assetWalletStore *postgres.AssetWalletStore,
+	assetIdentifierStore *postgres.AssetIdentifierStore,
 	storageSvc *storage.Service,
 	logger *zap.Logger,
 ) *DeviceImportHandler {
@@ -58,6 +60,7 @@ func NewDeviceImportHandler(
 		deviceSimBindingStore: deviceSimBindingStore,
 		iotCardStore:          iotCardStore,
 		assetWalletStore:      assetWalletStore,
+		assetIdentifierStore:  assetIdentifierStore,
 		storageService:        storageSvc,
 		logger:                logger,
 	}
@@ -98,7 +101,7 @@ func (h *DeviceImportHandler) HandleDeviceImport(ctx context.Context, task *asyn
 		zap.String("storage_key", importTask.StorageKey),
 	)
 
-	rows, totalCount, err := h.downloadAndParse(ctx, importTask)
+	parseResult, err := h.downloadAndParse(ctx, importTask)
 	if err != nil {
 		h.logger.Error("下载或解析 Excel 失败",
 			zap.Uint("task_id", importTask.ID),
@@ -108,9 +111,18 @@ func (h *DeviceImportHandler) HandleDeviceImport(ctx context.Context, task *asyn
 		return asynq.SkipRetry
 	}
 
-	result := h.processImport(ctx, importTask, rows, totalCount)
+	result := h.processImport(ctx, importTask, parseResult.Rows)
 
-	h.importTaskStore.UpdateResult(ctx, importTask.ID, totalCount, result.successCount, result.skipCount, result.failCount, 0, result.skippedItems, result.failedItems, nil)
+	for _, pe := range parseResult.ParseErrors {
+		result.failedItems = append(result.failedItems, model.ImportResultItem{
+			Line:   pe.Line,
+			ICCID:  pe.ICCID,
+			Reason: pe.Reason,
+		})
+		result.failCount++
+	}
+
+	h.importTaskStore.UpdateResult(ctx, importTask.ID, parseResult.TotalCount, result.successCount, result.skipCount, result.failCount, 0, result.skippedItems, result.failedItems, nil)
 
 	if result.failCount > 0 && result.successCount == 0 {
 		h.importTaskStore.UpdateStatus(ctx, importTask.ID, model.ImportTaskStatusFailed, "所有导入均失败")
@@ -128,24 +140,24 @@ func (h *DeviceImportHandler) HandleDeviceImport(ctx context.Context, task *asyn
 	return nil
 }
 
-func (h *DeviceImportHandler) downloadAndParse(ctx context.Context, task *model.DeviceImportTask) ([]utils.DeviceRow, int, error) {
+func (h *DeviceImportHandler) downloadAndParse(ctx context.Context, task *model.DeviceImportTask) (*utils.DeviceParseResult, error) {
 	if h.storageService == nil {
-		return nil, 0, ErrStorageNotConfigured
+		return nil, ErrStorageNotConfigured
 	}
 
 	if task.StorageKey == "" {
-		return nil, 0, ErrStorageKeyEmpty
+		return nil, ErrStorageKeyEmpty
 	}
 
 	localPath, cleanup, err := h.storageService.DownloadToTemp(ctx, task.StorageKey)
 	if err != nil {
-		return nil, 0, err
+		return nil, err
 	}
 	defer cleanup()
 
 	if !strings.HasSuffix(strings.ToLower(task.FileName), ".xlsx") {
 		ext := filepath.Ext(task.FileName)
-		return nil, 0, fmt.Errorf("不支持的文件格式 %s,请上传Excel文件(.xlsx)", ext)
+		return nil, fmt.Errorf("不支持的文件格式 %s,请上传Excel文件(.xlsx)", ext)
 	}
 
 	return utils.ParseDeviceExcel(localPath)
@@ -159,7 +171,7 @@ type deviceImportResult struct {
 	failedItems  model.ImportResultItems
 }
 
-func (h *DeviceImportHandler) processImport(ctx context.Context, task *model.DeviceImportTask, rows []utils.DeviceRow, totalCount int) *deviceImportResult {
+func (h *DeviceImportHandler) processImport(ctx context.Context, task *model.DeviceImportTask, rows []utils.DeviceRow) *deviceImportResult {
 	result := &deviceImportResult{
 		skippedItems: make(model.ImportResultItems, 0),
 		failedItems:  make(model.ImportResultItems, 0),
@@ -283,6 +295,11 @@ func (h *DeviceImportHandler) processBatch(ctx context.Context, task *model.Devi
 				return err
 			}
 
+			txIdentifierStore := postgres.NewAssetIdentifierStore(tx)
+			if err := txIdentifierStore.Register(ctx, device.VirtualNo, model.AssetTypeDevice, device.ID); err != nil {
+				return fmt.Errorf("虚拟号已被占用: %s", device.VirtualNo)
+			}
+
 			now := time.Now()
 			for i, cardID := range validCardIDs {
 				binding := &model.DeviceSimBinding{
@@ -297,7 +314,6 @@ func (h *DeviceImportHandler) processBatch(ctx context.Context, task *model.Devi
 				}
 			}
 
-			// 创建设备资产钱包（设备存在即应有钱包，避免购买时才发现缺失）
 			txWalletStore := postgres.NewAssetWalletStore(tx, nil)
 			deviceWallet := &model.AssetWallet{
 				ResourceType:  constants.AssetWalletResourceTypeDevice,