feat(tenant): add brand publish-records list and harden enterprise site management

- Add GET /api/tenant/publish-records: brand-scoped paginated list that merges
  in-flight (queued/publishing) records ahead of history (success/failed/cancelled),
  enriched with article title and latest desktop task id; wire up
  service/handler/router/swagger/router_test
- Rework PublishManagementView to consume publish-records instead of desktop
  publish tasks; add publishRecordsApi + shared-types
  (ListPublishRecordsParams, PublishRecordListResponse)
- Enterprise site Update: distinguish explicit null from missing PATCH fields via
  EnterpriseSitePatchString, dedup site_url before write, verify RowsAffected,
  and map unique-constraint violations to a clear conflict
- MediaView: enterprise site edit/delete flows with favicon fallback handling
- Localize enterprise site / PBootCMS error messages to Chinese across the
  backend and the admin-web error map, plus legacy raw-message translation
- deploy: gate migration-coupled service rollouts behind RUN_MIGRATIONS unless
  ALLOW_SKIP_MIGRATIONS_FOR_APP_ROLLOUT=true; handle empty SERVICES safely

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

server/internal/tenant/transport/enterprise_site_handler.go

@@ -135,7 +135,7 @@ func (h *EnterpriseSiteHandler) PublishArticle(c *gin.Context) {
 func enterpriseSiteIDParam(c *gin.Context) (int64, bool) {
 	id, err := strconv.ParseInt(c.Param("id"), 10, 64)
 	if err != nil || id <= 0 {
-		response.Error(c, response.ErrBadRequest(40001, "invalid_id", "enterprise site id must be a positive number"))
+		response.Error(c, response.ErrBadRequest(40001, "invalid_id", "企业站点 ID 不正确"))
 		return 0, false
 	}
 	return id, true

server/internal/tenant/transport/media_handler.go

@@ -2,6 +2,7 @@ package transport
 
 import (
 	"strconv"
+	"strings"
 
 	"github.com/gin-gonic/gin"
 
@@ -29,6 +30,43 @@ func (h *MediaHandler) ListPlatforms(c *gin.Context) {
 	response.Success(c, data)
 }
 
+func (h *MediaHandler) ListAllPublishRecords(c *gin.Context) {
+	req := app.ListPublishRecordsRequest{
+		Page:     1,
+		PageSize: 10,
+		Title:    strings.TrimSpace(c.Query("title")),
+	}
+
+	if rawPage := c.Query("page"); rawPage != "" {
+		parsed, err := strconv.Atoi(rawPage)
+		if err != nil || parsed <= 0 {
+			response.Error(c, response.ErrBadRequest(40001, "invalid_params", "page must be a positive integer"))
+			return
+		}
+		req.Page = parsed
+	}
+
+	rawPageSize := c.Query("page_size")
+	if rawPageSize == "" {
+		rawPageSize = c.Query("limit")
+	}
+	if rawPageSize != "" {
+		parsed, err := strconv.Atoi(rawPageSize)
+		if err != nil || parsed <= 0 {
+			response.Error(c, response.ErrBadRequest(40001, "invalid_params", "page_size must be a positive integer"))
+			return
+		}
+		req.PageSize = parsed
+	}
+
+	data, err := h.svc.ListPublishRecords(c.Request.Context(), req)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
 func (h *MediaHandler) ListPublishRecords(c *gin.Context) {
 	articleID, err := strconv.ParseInt(c.Param("id"), 10, 64)
 	if err != nil {

server/internal/tenant/transport/router.go

@@ -93,6 +93,7 @@ func RegisterRoutes(app *bootstrap.App) {
 	tenantProtected.POST("/tasks/:id/cancel", desktopTaskHandler.TenantCancel)
 	tenantProtected.GET("/publish-tasks", desktopTaskHandler.TenantListPublish)
 	tenantProtected.POST("/publish-tasks/:id/retry", middleware.RequireCurrentBrand(), desktopTaskHandler.TenantRetryPublish)
+	tenantProtected.GET("/publish-records", middleware.RequireCurrentBrand(), mediaHandler.ListAllPublishRecords)
 	tenantProtected.POST("/publish-jobs", middleware.RequireCurrentBrand(), publishJobHandler.Create)
 
 	complianceHandler := NewComplianceHandler(app)

server/internal/tenant/transport/router_test.go

@@ -33,6 +33,7 @@ func TestProtectedRoutes_RequireAuth(t *testing.T) {
 		{http.MethodPost, "/api/tenant/tasks/:id/cancel"},
 		{http.MethodGet, "/api/tenant/publish-tasks"},
 		{http.MethodPost, "/api/tenant/publish-tasks/:id/retry"},
+		{http.MethodGet, "/api/tenant/publish-records"},
 		{http.MethodPost, "/api/tenant/publish-jobs"},
 		{http.MethodGet, "/api/tenant/media/platforms"},
 		{http.MethodGet, "/api/tenant/workspace/overview"},