feat: 实时消息与管理端运营能力

新增群聊/私信与公共 WebSocket 总线，站长用户内容档案，并将通知与待审角标改为推送驱动；同步精简管理仪表盘并修复主题换肤 DOM 冲突。

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/app/admin/users/[id]/page.tsx

@@ -0,0 +1,44 @@
+import type { Metadata } from "next";
+import { cookies } from "next/headers";
+import { authCookieHeader } from "@/lib/cookies";
+import { fetchAdminUserAudit } from "@/lib/api";
+import { getMeCached } from "@/lib/serverData";
+import { isOwner, isSuperOrOwner } from "@/lib/roles";
+import Forbidden from "../../Forbidden";
+import UserAuditClient from "./UserAuditClient";
+
+export const metadata: Metadata = {
+  title: "用户内容档案",
+};
+
+interface PageProps {
+  params: Promise<{ id: string }>;
+}
+
+export default async function AdminUserAuditPage({ params }: PageProps) {
+  const { id: idRaw } = await params;
+  const userId = parseInt(idRaw, 10);
+  if (!Number.isFinite(userId) || userId <= 0) {
+    return <Forbidden text="无效的用户 ID。" />;
+  }
+
+  const cookie = authCookieHeader(await cookies());
+  const me = await getMeCached(cookie || undefined);
+
+  if (!me.user || !isSuperOrOwner(me.user.role)) {
+    return <Forbidden text="用户与角色权限仅超级管理员和站长可操作。" />;
+  }
+  if (!isOwner(me.user.role)) {
+    return <Forbidden text="用户内容档案仅站长可查看。" />;
+  }
+
+  let profile;
+  try {
+    profile = await fetchAdminUserAudit(userId, cookie || undefined);
+  } catch (e) {
+    const msg = e instanceof Error ? e.message : "获取用户档案失败";
+    return <Forbidden text={msg} />;
+  }
+
+  return <UserAuditClient userId={userId} initial={profile} />;
+}