feat(web): 08 后台四个页面落地（内容治理 / 订单与权益 / 创作者审核 / 数据看板）

为什么：08 运营后台的接口在前几轮已经实现，但运营在界面上点不到——
评论审核、举报工单、敏感词维护、订单补发/退款、权益回收、金币补发、对账、
创作者入驻与内容提交审核、运营大盘，都只能靠 curl。本轮把这四个页面补齐，
08 才算真正闭环。

- 内容治理：评论审核（通过/驳回/删除）、举报工单处理（可联动封禁）、敏感词库增删改查
- 订单与权益：订单检索与流水、补发、退款、权益检索/人工补发/回收、金币流水与人工补币、对账运行与历史
- 创作者审核：入驻审核（通过/驳回原因码/冻结）+ 资质抽屉；内容提交审核（通过/驳回）
- 数据看板：overview 五组指标 + transcode 队列与失败任务，只读；取不到的指标显示「暂无数据源」而不是 0
- 新增 console.css（工具条/抽屉/看板卡片，含深色模式），四个页面共用；时间列统一 yyyy-MM-dd HH:mm:ss
- 按钮按权限点显隐（没有 *:update / *:audit 的角色看到的是只读态），表格列与后端字段一一对应

src/api/admin/governance.ts

@@ -0,0 +1,49 @@
+import request from '@/axios'
+import type { PageResult, CommentItem, ReportItem, SensitiveWordItem } from './types'
+
+export const pageCommentsApi = (params: Record<string, unknown>) => {
+  return request.get<PageResult<CommentItem>>({ url: '/admin/comments/page', params })
+}
+
+export const listCommentAuditRecordsApi = (id: number) => {
+  return request.get<Record<string, unknown>[]>({
+    url: `/admin/comments/${id}/audit-records`
+  })
+}
+
+/** result: PASS / REJECT */
+export const auditCommentApi = (id: number, data: Record<string, unknown>) => {
+  return request.put<void>({ url: `/admin/comments/${id}/audit`, data })
+}
+
+export const deleteCommentApi = (id: number) => {
+  return request.delete<void>({ url: `/admin/comments/${id}` })
+}
+
+export const pageReportsApi = (params: Record<string, unknown>) => {
+  return request.get<PageResult<ReportItem>>({ url: '/admin/reports/page', params })
+}
+
+/** status: handled / rejected；banTarget=true 时联动封禁被举报用户 */
+export const handleReportApi = (id: number, data: Record<string, unknown>) => {
+  return request.put<void>({ url: `/admin/reports/${id}/handle`, data })
+}
+
+export const pageSensitiveWordsApi = (params: Record<string, unknown>) => {
+  return request.get<PageResult<SensitiveWordItem>>({
+    url: '/admin/sensitive-words/page',
+    params
+  })
+}
+
+export const createSensitiveWordApi = (data: Record<string, unknown>) => {
+  return request.post<number>({ url: '/admin/sensitive-words', data })
+}
+
+export const updateSensitiveWordApi = (id: number, data: Record<string, unknown>) => {
+  return request.put<void>({ url: `/admin/sensitive-words/${id}`, data })
+}
+
+export const deleteSensitiveWordApi = (id: number) => {
+  return request.delete<void>({ url: `/admin/sensitive-words/${id}` })
+}