fix: 停复机成功后上游状态滞后导致暂停轮询的卡到期或退款漏停

- 停复机成功后保护窗口内（polling.stop_resume.status_grace_seconds，默认 300 秒）查卡状态返回操作前的状态视为上游滞后，不回写网络状态
- 套餐到期、退款场景不看库里的开停状态，资产无可用主套餐即停机，上游已停时按已是目标状态结束
- 迁移 000257 插入保护窗口配置

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

internal/bootstrap/services.go

@@ -2,6 +2,9 @@ package bootstrap
 
 import (
 	"context"
+	"github.com/redis/go-redis/v9"
+	"gorm.io/gorm"
+	"time"
 
 	"go.uber.org/zap"
 
@@ -208,6 +211,7 @@ func initServices(s *stores, deps *Dependencies) *services {
 		trafficCalcPolicy = cardObservationApp.BuildTrafficCalcPolicy(context.Background(), deps.DB, cfg.TrafficCalc, deps.Logger)
 	}
 	cardObservationService.SetTrafficCalcPolicy(trafficCalcPolicy, deps.Logger)
+	cardObservationService.SetCommandGrace(commandGraceProvider(deps.DB, deps.Redis, deps.Logger))
 	iotCard.SetCardObservationService(cardObservationService)
 	iotCard.SetSpeedTierIntegrationLog(integrationlog.NewRepository(deps.DB))
 	seriesCoordinator := cardObservationInfra.NewSeriesCoordinator(deps.Redis)
@@ -608,3 +612,9 @@ func newCarrierService(store *postgres.CarrierStore, auditWriter *auditInfra.Wri
 	}
 	return service
 }
+
+// commandGraceProvider 返回停复机成功后的状态保护窗口（受控系统配置，API 与 Worker 共用同一份配置）。
+func commandGraceProvider(db *gorm.DB, redisClient *redis.Client, logger *zap.Logger) func(ctx context.Context) time.Duration {
+	settings := carrierqueue.NewDefaultSettingsProvider(db, redisClient, logger)
+	return func(ctx context.Context) time.Duration { return settings.Current(ctx).SRStatusGrace }
+}

internal/bootstrap/worker_services.go

@@ -127,6 +127,7 @@ func initWorkerServices(stores *queue.WorkerStores, deps *WorkerDependencies) *q
 	cardObservationService.SetStateAuditWriter(iotCardAuditService)
 	// 运营商通道流量阈值达量判定嵌入流量观测事务：与卡流量事实同事务写周期锁与停机事件。
 	cardObservationService.SetChannelThresholdEvaluator(carrierThresholdService)
+	cardObservationService.SetCommandGrace(commandGraceProvider(deps.DB, deps.Redis, deps.Logger))
 	// 卡流量计量切换策略：启动时展开灰度名单为内存卡集合，API 与全部 Worker 必须使用一致配置。
 	if cfg := config.Get(); cfg != nil {
 		cardObservationService.SetTrafficCalcPolicy(