feat(compliance): add content compliance detection across tenant, ops, and clients

Implements the Revision 8/9 compliance design: tenant + ops backends, ops-web
content-safety pages, admin-web editor/publish gate integration, desktop publish
block surfacing, and supporting migrations / shared types / config plumbing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/admin-web/src/lib/errors.ts

@@ -61,6 +61,14 @@ const errorMessageMap: Record<string, string> = {
   desktop_account_not_found: '所选桌面账号不存在，请刷新后重试',
   desktop_client_offline: '当前登录账号的桌面客户端未在线，请先打开 desktop-client',
   desktop_publish_job_store_unavailable: '发布队列暂时不可用，请稍后重试',
+  compliance_blocked: '内容合规检测已阻断本次发布',
+  compliance_needs_ack: '内容合规检测需要确认风险后才能发布',
+  compliance_ack_mismatch: '合规确认已失效，请重新检测并确认',
+  compliance_engine_unavailable: '合规检测服务暂时不可用',
+  compliance_manual_review_pending: '该版本正在等待运营审阅',
+  compliance_manual_review_rejected: '该版本已被运营驳回，请修改后重新保存',
+  compliance_manual_review_terminal: '该版本已有终态审阅结果',
+  compliance_manual_review_not_cancellable: '当前审阅状态不能撤回',
   desktop_media_api_removed: '旧版媒体接口已下线，请刷新页面后重试',
   publisher_plugin_timeout: '浏览器插件响应超时，请刷新当前页面后重试',
   publisher_plugin_empty_response: '浏览器插件未返回数据，请刷新当前页面后重试',