后台支持多账号与页面访问权限

保留环境变量管理员作为 owner，并新增可持久化管理的 member 账号
建立一级页面权限、实时会话失效和后端逐请求鉴权
统一操作记录与配置记录展示管理员显示名称，隐藏内部主体标识
补充账号管理页面、生成绑定、定向测试和技术文档

apps/admin-web/src/api/adminApiClient.ts

@@ -1,4 +1,7 @@
 import type {
+  AdminAccountListResponse,
+  AdminCreateAccountRequest,
+  AdminCreateAccountResponse,
   AdminUpsertCreationEntryEventBannersRequest,
   AdminUpsertCreationEntryTypeConfigRequest,
   AdminCreationEntryConfigResponse,
@@ -39,6 +42,8 @@ import type {
   AdminTrackingEventListResponse,
   AdminUpdateWorkVisibilityRequest,
   AdminUpdateWorkVisibilityResponse,
+  AdminUpdateAccountRequest,
+  AdminUpdateAccountResponse,
   AdminUploadedEditorShowcaseCampaignImage,
   AdminUpsertEditorShowcaseCampaignRequest,
   AdminUpsertFeatureGateConfigRequest,
@@ -188,6 +193,32 @@ export function getAdminMe(token: string) {
   return request<AdminMeResponse>('/admin/api/me', { token });
 }
 
+export function listAdminAccounts(token: string) {
+  return request<AdminAccountListResponse>('/admin/api/accounts', {token});
+}
+
+export function createAdminAccount(
+  token: string,
+  payload: AdminCreateAccountRequest,
+) {
+  return request<AdminCreateAccountResponse>('/admin/api/accounts', {
+    method: 'POST',
+    token,
+    body: payload,
+  });
+}
+
+export function updateAdminAccount(
+  token: string,
+  accountId: string,
+  payload: AdminUpdateAccountRequest,
+) {
+  return request<AdminUpdateAccountResponse>(
+    `/admin/api/accounts/${encodeURIComponent(accountId)}`,
+    {method: 'PUT', token, body: payload},
+  );
+}
+
 export function getAdminOverview(token: string) {
   return request<AdminOverviewResponse>('/admin/api/overview', { token });
 }