feat(ops): add tenant admin user management module

Adds /admin-users CRUD on the ops backend, covering listing, plan/role/KOL
toggles, subscription expiry, status flips and password resets, with a
configurable default plan code. The ops console exposes a new top-level
"用户管理" view and reorganises the sidebar so 操作员管理 and 审计日志
move under a "系统设置" group; AccountsView is renamed accordingly.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/ops-web/src/router/index.ts

@@ -17,12 +17,18 @@ export const router = createRouter({
       component: () => import("@/layouts/AppShell.vue"),
       meta: { requiresAuth: true },
       children: [
-        { path: "", redirect: "/accounts" },
+        { path: "", redirect: "/admin-users" },
+        {
+          path: "admin-users",
+          name: "admin-users",
+          component: () => import("@/views/AdminUsersView.vue"),
+          meta: { title: "用户管理" },
+        },
         {
           path: "accounts",
           name: "accounts",
           component: () => import("@/views/AccountsView.vue"),
-          meta: { title: "账号管理" },
+          meta: { title: "操作员管理" },
         },
         {
           path: "audits",
@@ -59,7 +65,7 @@ router.beforeEach((to) => {
   }
 
   if (to.name === "login" && auth.isAuthenticated) {
-    return { name: "accounts" };
+    return { name: "admin-users" };
   }
 
   return true;