feat(server/ops-api): add operations console backend

Stand up an internal ops-api service with operator account, auth, and
audit log subsystems backed by a dedicated migrations_ops migration set.
Wire Makefile targets and the migrate Dockerfile stage so the new schema
ships alongside the existing tenant + monitoring databases.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

server/configs/ops-config.yaml

@@ -0,0 +1,27 @@
+server:
+  port: 8090
+  mode: debug
+
+database:
+  host: localhost
+  port: 5432
+  user: geo
+  password: geo_dev
+  dbname: geo
+  sslmode: disable
+  max_open_conns: 10
+  max_idle_conns: 2
+
+log:
+  level: info
+  format: json
+
+jwt:
+  secret: "15645415841"           # 必须通过 OPS_JWT_SECRET 环境变量提供
+  access_ttl: 8h
+
+default_admin:
+  username: admin
+  display_name: 系统管理员
+  email: ""
+  password: "liang0920"         # 必须通过 OPS_DEFAULT_ADMIN_PASSWORD 提供（首次启动且表为空时使用）