fix: 第1批 F1、M12 一资产一号与换货按手机号关联校验

- F1 一个资产同时只能有一个有效手机号关联，他号绑定返回 1192（不含号码），同号幂等
- 登录 need_bind_phone 改看资产是否已有有效关联，新增 asset_phone_bound、asset_phone_is_own；H5 绑定按客户/资产两侧状态分别写入
- 客户换号不再迁移资产关联
- M12 换货新资产有有效手机号关联即拒绝，号码只在 data.phone；换货完成清空旧资产客户绑定并失效旧资产关联（exchange_completed），均不迁移
- OpenSpec Change enforce-single-phone-per-asset：11/16，H5 短信与换货端到端验证待测试部署后完成

internal/bootstrap/services.go

@@ -370,6 +370,7 @@ func initServices(s *stores, deps *Dependencies) *services {
 	exchangeService := exchangeSvc.New(deps.DB, s.ExchangeOrder, s.IotCard, s.Device, s.AssetWallet, s.AssetWalletTransaction, s.PackageUsage, s.PackageUsageDailyRecord, s.ResourceTag, customerBinding, deps.Logger)
 	exchangeService.SetShippingCreatedNotifier(exchangeApp.NewShippingCreatedNotifier(exchangeInfra.NewShippingNotificationWriter(outbox.NewRepository())))
 	exchangeService.SetAccessAudit(auditWriter)
+	exchangeService.SetPhoneAssetAssociationStore(s.PhoneAssetAssociation)
 	assetService := assetSvc.New(deps.DB, s.Device, s.IotCard, s.PackageUsage, s.Package, s.PackageSeries, s.DeviceSimBinding, s.Shop, deps.Redis, iotCard, deps.GatewayClient, s.AssetIdentifier, s.Order, s.OrderItem, s.ExchangeOrder)
 	assetService.SetPhoneAssetAssociationStore(s.PhoneAssetAssociation)
 	assetService.SetAccessAudit(auditWriter)