feat(admin): 商品配置与系统公告管理接口，id 以字符串下发

- /admin/products 六个接口 + 校验（code 唯一、store_product_id 同平台唯一、
  COIN_PACK 需 coin_amount>0、VIP 需 vip_days>0、VIP 只建不启）
- /admin/notices 六个接口，与 C 端 /app/notices 共用 OpsNoticeService.pageForApp 一套筛选口径
- 权限点 product:list/product:update/notice:list/notice:update + 菜单 31/32/33（sql/data-phase1.sql 幂等）
- 雪花 id 超过 JS 安全整数范围：id 以字符串下发，避免浏览器四舍五入导致回查 200002
- C 端商品查询收敛到 ProductService.findForStore，OrderService 不再自带一份
- 测试：module-commerce 33 / admin-api 16 / app-api 49 / worker 12，共 110 条全过

fruitshorts-app-api/src/test/java/com/fruitshorts/app/controller/AppOrdersVerifyContractTest.java

@@ -12,6 +12,7 @@ import com.fruitshorts.commerce.dal.mapper.StoreReceiptMapper;
 import com.fruitshorts.commerce.service.DisabledStoreVerifier;
 import com.fruitshorts.commerce.service.EntitlementService;
 import com.fruitshorts.commerce.service.OrderService;
+import com.fruitshorts.commerce.service.ProductService;
 import com.fruitshorts.commerce.service.StoreVerifier;
 import com.fruitshorts.commerce.service.UnlockService;
 import com.fruitshorts.commerce.service.WalletService;
@@ -65,8 +66,8 @@ class AppOrdersVerifyContractTest {
         storeReceiptMapper = mock(StoreReceiptMapper.class);
         verifier = new StubStoreVerifier();
         OrderService orderService = new OrderService(ordersMapper, mock(OrderEventMapper.class),
-                productMapper, storeReceiptMapper, verifier, mock(WalletService.class),
-                mock(EntitlementService.class));
+                new ProductService(productMapper), storeReceiptMapper, verifier,
+                mock(WalletService.class), mock(EntitlementService.class));
         mockMvc = ControllerContractSupport.mockMvcOf(new AppCommerceController(
                 mock(WalletService.class), mock(UnlockService.class), orderService));
         SecurityContextHolder.getContext().setAuthentication(new UsernamePasswordAuthenticationToken(
@@ -131,7 +132,7 @@ class AppOrdersVerifyContractTest {
     void should_keep_disabled_behaviour_when_store_is_not_configured() throws Exception {
         // 默认实现（未配凭据）：对外仍是"尚未配置"，不产生订单
         OrderService disabled = new OrderService(ordersMapper, mock(OrderEventMapper.class),
-                productMapper, storeReceiptMapper, new DisabledStoreVerifier(),
+                new ProductService(productMapper), storeReceiptMapper, new DisabledStoreVerifier(),
                 mock(WalletService.class), mock(EntitlementService.class));
         MockMvc disabledMvc = ControllerContractSupport.mockMvcOf(new AppCommerceController(
                 mock(WalletService.class), mock(UnlockService.class), disabled));