固化七月迭代审计治理进展以隔离线上热修

Constraint: 切换 main 前必须保存当前七月分支全部项目进展，套餐生效提案仅属于 Iteration/7-11。

Rejected: 将七月套餐修复直接移植到 main | 两个分支的可靠投递架构不同。

Confidence: medium

Scope-risk: broad

Directive: 不得将本提交整体 cherry-pick 到 main；main 套餐热修必须基于其纯 Asynq 代码独立实施。

Tested: git diff --check；openspec validate fix-package-activation-starvation --strict。

Not-tested: 按用户要求未运行自动化测试；go build ./... 因当前审计改造中的 Enterprise 模型字面量和 role.recordFailure 参数类型错误未通过。

internal/infrastructure/wecom/approval_detail_client.go

@@ -42,7 +42,7 @@ func NewApprovalDetailClient(tokens DirectoryTokenProvider, integration TokenInt
 }
 
 // Get 获取审批详情并记录一次真实外呼。
-func (c *ApprovalDetailClient) Get(ctx context.Context, applicationID uint, spNo string) (ApprovalDetail, error) {
+func (c *ApprovalDetailClient) Get(ctx context.Context, applicationID uint, spNo string, resourceID *string, correlationID string) (ApprovalDetail, error) {
 	token, err := c.tokens.GetAccessToken(ctx, applicationID)
 	if err != nil {
 		return ApprovalDetail{}, err
@@ -51,11 +51,14 @@ func (c *ApprovalDetailClient) Get(ctx context.Context, applicationID uint, spNo
 	if err != nil {
 		return ApprovalDetail{}, err
 	}
-	resourceID := strconv.FormatUint(uint64(applicationID), 10)
+	resourceKey := strings.TrimSpace(spNo)
+	triggerSeries := "wecom-approval-detail:" + resourceKey
 	attempt, err := c.integration.Start(ctx, integrationlog.Attempt{
 		Provider: constants.IntegrationProviderWeCom, Direction: constants.IntegrationDirectionOutbound,
 		Operation: constants.IntegrationOperationWeComApprovalDetail, ResourceType: constants.WeComApprovalInstanceResourceType,
-		ResourceID: &resourceID, ExternalID: &spNo, RequestSummary: map[string]any{"application_id": applicationID, "sp_no": spNo},
+		ResourceID: resourceID, ResourceKey: &resourceKey, ExternalID: &spNo,
+		TriggerSeries: &triggerSeries, CorrelationID: optionalIntegrationString(correlationID),
+		RequestSummary: map[string]any{"application_id": applicationID, "sp_no": spNo},
 	})
 	if err != nil {
 		return ApprovalDetail{}, err