feat(desktop): drop parked review flow, add publish management

SaaS 侧人工审核后才创建 publish job，desktop 不再做二次审核：移除
manual/waiting_user/parked/from_parked 状态机与 LeaseFromParked 查询，
desktop client 只执行发布并新增"发布管理"页（待发布队列 / 历史 / 再次
发送）。同时抽离 @geo/publisher-platforms 共享适配器包、新增 Redis-based
desktop_presence 与 publish_record_support，刷新 admin-web 发布弹窗与
媒体库；plan A / spec 文档同步口径。

server/internal/tenant/transport/router_test.go

@@ -26,10 +26,12 @@ func TestProtectedRoutes_RequireAuth(t *testing.T) {
 		{http.MethodGet, "/api/auth/me"},
 		{http.MethodPost, "/api/auth/logout"},
 		{http.MethodPost, "/api/desktop/clients/register"},
+		{http.MethodGet, "/api/tenant/accounts"},
 		{http.MethodPost, "/api/tenant/accounts/:id/request-delete"},
 		{http.MethodPost, "/api/tenant/tasks/:id/reconcile"},
 		{http.MethodPost, "/api/tenant/tasks/:id/cancel"},
 		{http.MethodPost, "/api/tenant/publish-jobs"},
+		{http.MethodGet, "/api/tenant/media/platforms"},
 		{http.MethodGet, "/api/tenant/workspace/overview"},
 		{http.MethodGet, "/api/tenant/templates"},
 		{http.MethodGet, "/api/tenant/articles"},
@@ -75,6 +77,7 @@ func TestDesktopClientRoutes_ClientTokenAuth(t *testing.T) {
 	}{
 		{http.MethodGet, "/api/desktop/events"},
 		{http.MethodGet, "/api/desktop/accounts"},
+		{http.MethodPost, "/api/desktop/clients/offline"},
 		{http.MethodPost, "/api/desktop/tasks/lease"},
 		{http.MethodPost, "/api/desktop/tasks/:id/result"},
 	}