feat(ops): add object storage management and site-mapping CSV import/export

Ship the Ops backstage 对象存储 page (browse / upload / move / delete /
folder ops) backed by a new object-storage service + handler, with the
shared storage client extended with List/Stat/Copy/Usage/DownloadURL so
both MinIO and Aliyun providers cover the new surface. Add
ForcePathStyle to the object-storage config and treat r2/s3/custom_s3
as external providers so Cloudflare R2 and other S3-compatibles can
share the MinIO client path without spinning up the bundled MinIO.

Also add CSV import/export + template download to the site-domain
mappings page, raise gin MaxMultipartMemory to 8 MiB for the new
multipart endpoints, register Ops swagger routes, and extend the
descriptions-parity test to cover the ops router.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

server/cmd/ops-api/main.go

@@ -122,6 +122,7 @@ func main() {
 	siteDomainMappingSvc := app.NewSiteDomainMappingService(siteDomainMappingsRepo, auditSvc)
 	objectStorageClient := objectstorage.New(cfg.ObjectStorage, logger)
 	desktopClientReleaseSvc := app.NewDesktopClientReleaseService(desktopClientReleasesRepo, objectStorageClient, auditSvc)
+	objectStorageSvc := app.NewObjectStorageService(objectStorageClient, auditSvc).WithLogger(logger)
 	complianceSvc := app.NewComplianceService(pool, auditSvc, logger)
 	schedulerSvc := app.NewSchedulerService(schedulerRepo, auditSvc)
 
@@ -157,22 +158,23 @@ func main() {
 	}
 
 	transport.RegisterRoutes(transport.Deps{
-		Engine:       engine,
-		Server:       cfg.Server,
-		Logger:       logger,
-		DB:           pool,
-		MonitoringDB: monitoringPool,
-		Issuer:       issuer,
-		Auth:         authSvc,
-		Accounts:     accountSvc,
-		AdminUsers:   adminUserSvc,
-		Jobs:         jobSvc,
-		KolSubs:      kolSubscriptionSvc,
-		Audits:       auditSvc,
-		SiteDomains:  siteDomainMappingSvc,
-		Releases:     desktopClientReleaseSvc,
-		Compliance:   complianceSvc,
-		Scheduler:    schedulerSvc,
+		Engine:        engine,
+		Server:        cfg.Server,
+		Logger:        logger,
+		DB:            pool,
+		MonitoringDB:  monitoringPool,
+		Issuer:        issuer,
+		Auth:          authSvc,
+		Accounts:      accountSvc,
+		AdminUsers:    adminUserSvc,
+		Jobs:          jobSvc,
+		KolSubs:       kolSubscriptionSvc,
+		Audits:        auditSvc,
+		SiteDomains:   siteDomainMappingSvc,
+		Releases:      desktopClientReleaseSvc,
+		ObjectStorage: objectStorageSvc,
+		Compliance:    complianceSvc,
+		Scheduler:     schedulerSvc,
 	})
 
 	addr := fmt.Sprintf(":%d", cfg.Server.Port)