feat(admin): 独立后台壳、站点分析与聊天监管，公开站拆出主题切换与访问埋点

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/router/router.go

@@ -55,6 +55,8 @@ func Setup(cfg *config.Config) (*gin.Engine, error) {
 	adminUserSvc := service.NewAdminUserService(model.DB)
 	moderationSvc := service.NewModerationService(model.DB, notifSvc)
 	chatSvc := service.NewChatService(model.DB, notifSvc)
+	telemetrySvc := service.NewTelemetryService(model.DB)
+	analyticsSvc := service.NewAnalyticsService(model.DB)
 	if err := uploadSvc.EnsureDir(); err != nil {
 		return nil, err
 	}
@@ -82,6 +84,8 @@ func Setup(cfg *config.Config) (*gin.Engine, error) {
 		AdminUser:    adminUserSvc,
 		Moderation:   moderationSvc,
 		Chat:         chatSvc,
+		Telemetry:    telemetrySvc,
+		Analytics:    analyticsSvc,
 	}
 	// 通知落库后统一推 WS 红点（点赞/评论/审核/@ 等共用）
 	notifSvc.OnNotifyNew = func(userID uint) {
@@ -122,6 +126,7 @@ func Setup(cfg *config.Config) (*gin.Engine, error) {
 		pubAPI.GET("/announcements", h.AnnouncementsList)
 		pubAPI.GET("/announcements/:id", h.AnnouncementDetail)
 		pubAPI.GET("/settings", h.PublicSettings)
+		pubAPI.POST("/telemetry/pageview", middleware.CSRFMiddleware(), h.TelemetryPageView)
 		pubAPI.POST("/register", middleware.RateLimitMiddleware(limiter, service.RateRegister), h.Register)
 		pubAPI.POST("/login", middleware.RateLimitMiddleware(limiter, service.RateLogin), h.Login)
 		// refresh token 端点：access 过期后用 refresh 换新 token（需 CSRF 防护）
@@ -223,6 +228,13 @@ func Setup(cfg *config.Config) (*gin.Engine, error) {
 		// 积分与类型帖概览（管理员及以上）
 		staffAPI.GET("/economy", authMW.RequirePerm(service.PermAnnouncements), h.AdminPointsStats)
 
+		// 站点分析概览（任意 staff）
+		staffAPI.GET("/analytics/overview", h.AdminAnalyticsOverview)
+
+		// 群聊监管队列（任意 staff；撤回权限仍按 oversee 规则）
+		staffAPI.GET("/chat/messages", h.AdminChatMessages)
+		staffAPI.DELETE("/chat/rooms/:roomId/messages/:mid", h.AdminRecallChatMessage)
+
 		// 站点公告文章管理（管理员及以上）
 		announceAPI := staffAPI.Group("", authMW.RequirePerm(service.PermAnnouncements))
 		announceAPI.GET("/announcements", h.AdminListAnnouncements)