固化七月迭代审计治理进展以隔离线上热修

Constraint: 切换 main 前必须保存当前七月分支全部项目进展，套餐生效提案仅属于 Iteration/7-11。

Rejected: 将七月套餐修复直接移植到 main | 两个分支的可靠投递架构不同。

Confidence: medium

Scope-risk: broad

Directive: 不得将本提交整体 cherry-pick 到 main；main 套餐热修必须基于其纯 Asynq 代码独立实施。

Tested: git diff --check；openspec validate fix-package-activation-starvation --strict。

Not-tested: 按用户要求未运行自动化测试；go build ./... 因当前审计改造中的 Enterprise 模型字面量和 role.recordFailure 参数类型错误未通过。

internal/middleware/agent_open_api_auth.go

@@ -14,6 +14,7 @@ import (
 
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/internal/store/postgres"
+	"github.com/break/junhong_cmp_fiber/pkg/auditcontext"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
 	"github.com/break/junhong_cmp_fiber/pkg/errors"
 	pkgmiddleware "github.com/break/junhong_cmp_fiber/pkg/middleware"
@@ -245,5 +246,13 @@ func injectAgentOpenAPIContext(c *fiber.Ctx, shopStore *postgres.ShopStore, acco
 		SubordinateShopIDs: shopIDs,
 	}
 	pkgmiddleware.SetUserToFiberContext(c, info)
+	var actorShopID *uint
+	if shopID > 0 {
+		actorShopID = &shopID
+	}
+	c.SetUserContext(auditcontext.With(c.UserContext(), auditcontext.Context{
+		ActorKind: constants.AuditActorOpenAPI, ActorID: strconv.FormatUint(uint64(account.ID), 10),
+		ActorName: account.Username, ActorShopID: actorShopID, Source: constants.AuditSourceOpenAPI,
+	}))
 	return nil
 }