feat(media-supply): add media resource supply marketplace

Introduce an end-to-end media-supply feature: tenant-side resource sync
service/worker backed by a Meijiequan supplier client, ops-side management
APIs, and admin/ops web views for resources, orders, favorites and
submission. Adds a shared digitocr helper, MediaSupply config blocks for
tenant and ops, shared types, and migrations for supplier media resources,
price overrides, customer visibility and order refunds.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

server/cmd/ops-api/main.go

@@ -19,6 +19,7 @@ import (
 	sharedauth "github.com/geo-platform/tenant-api/internal/shared/auth"
 	sharedbootstrap "github.com/geo-platform/tenant-api/internal/shared/bootstrap"
 	"github.com/geo-platform/tenant-api/internal/shared/cache"
+	sharedconfig "github.com/geo-platform/tenant-api/internal/shared/config"
 	"github.com/geo-platform/tenant-api/internal/shared/ipregion"
 	"github.com/geo-platform/tenant-api/internal/shared/messaging/rabbitmq"
 	"github.com/geo-platform/tenant-api/internal/shared/objectstorage"
@@ -125,6 +126,12 @@ func main() {
 	objectStorageSvc := app.NewObjectStorageService(objectStorageClient, auditSvc).WithLogger(logger)
 	complianceSvc := app.NewComplianceService(pool, auditSvc, logger)
 	schedulerSvc := app.NewSchedulerService(schedulerRepo, auditSvc)
+	mediaSupplySvc := app.NewMediaSupplyService(pool, auditSvc, func() sharedconfig.MediaSupplyConfig {
+		if current := configStore.Current(); current != nil {
+			return current.MediaSupply
+		}
+		return sharedconfig.MediaSupplyConfig{}
+	})
 
 	if err := app.SeedDefaultAdmin(ctx, accountsRepo, app.DefaultAdminSeed{
 		Username:    cfg.DefaultAdmin.Username,
@@ -175,6 +182,7 @@ func main() {
 		ObjectStorage: objectStorageSvc,
 		Compliance:    complianceSvc,
 		Scheduler:     schedulerSvc,
+		MediaSupply:   mediaSupplySvc,
 	})
 
 	addr := fmt.Sprintf(":%d", cfg.Server.Port)