固化七月迭代审计治理进展以隔离线上热修

Constraint: 切换 main 前必须保存当前七月分支全部项目进展，套餐生效提案仅属于 Iteration/7-11。

Rejected: 将七月套餐修复直接移植到 main | 两个分支的可靠投递架构不同。

Confidence: medium

Scope-risk: broad

Directive: 不得将本提交整体 cherry-pick 到 main；main 套餐热修必须基于其纯 Asynq 代码独立实施。

Tested: git diff --check；openspec validate fix-package-activation-starvation --strict。

Not-tested: 按用户要求未运行自动化测试；go build ./... 因当前审计改造中的 Enterprise 模型字面量和 role.recordFailure 参数类型错误未通过。

pkg/middleware/auth.go

@@ -2,7 +2,9 @@ package middleware
 
 import (
 	"context"
+	"strconv"
 
+	"github.com/break/junhong_cmp_fiber/pkg/auditcontext"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
 	"github.com/break/junhong_cmp_fiber/pkg/errors"
 	"github.com/break/junhong_cmp_fiber/pkg/logger"
@@ -37,6 +39,27 @@ func SetUserContext(ctx context.Context, info *UserContextInfo) context.Context
 	if info.SubordinateShopIDs != nil {
 		ctx = context.WithValue(ctx, constants.ContextKeySubordinateShopIDs, info.SubordinateShopIDs)
 	}
+	actorKind := constants.AuditActorAccount
+	actorID := info.UserID
+	source := constants.AuditSourceAdminAPI
+	if info.UserType == constants.UserTypePersonalCustomer {
+		actorKind = constants.AuditActorPersonalCustomer
+		source = constants.AuditSourcePersonalAPI
+		if info.CustomerID > 0 {
+			actorID = info.CustomerID
+		}
+	}
+	var shopID, enterpriseID *uint
+	if info.ShopID > 0 {
+		shopID = &info.ShopID
+	}
+	if info.EnterpriseID > 0 {
+		enterpriseID = &info.EnterpriseID
+	}
+	ctx = auditcontext.With(ctx, auditcontext.Context{
+		ActorKind: actorKind, ActorID: strconv.FormatUint(uint64(actorID), 10), ActorName: info.Username,
+		ActorShopID: shopID, ActorEnterpriseID: enterpriseID, Source: source,
+	})
 	return ctx
 }