feat(user-ban): frontend ban modal replaces the backend restrictions tab

1:1 replicate the reference theme user-ban flow on the frontend:

- Ban/unban modal rendered by inc/helpers/user-ban.php, opened via
  AksrtModalRuntime.openRemote (600px desktop dialog, 360px initial
  height, mobile bottom drawer, c-yellow colorful unban header).
- Three entry points wired: user homepage cover three-dot menu,
  comment section menu, article author card menu (ban item takes
  priority over report, matching the reference hook order).
- REST endpoints /user-ban/modal and /user-ban/set under aksrt/v1,
  guarded by check_permission, persisted through User\Restriction.
- Submit semantics match zib_ajax_set_user_ban: ban reloads the page,
  unban only closes the modal.

Cleanup (no dual-track): the backend ban-restrictions tab, its form
handlers and flash keys are removed; ticket processing links to the
frontend user homepage as the reference theme does; admin/report and
appeal notification URLs move to type/status query args.

Verification: 337/337 widget-system contract tests, 41/41 admin and
front-submit tests, php -l clean on all changed PHP files.

inc/helpers/aksrt-single-components.php

@@ -132,18 +132,24 @@ if (!function_exists('aksrt_get_single_meta_box')) :
 		$more .= '<button type="button" class="but cir post-drop-meta__toggle" aria-haspopup="true" aria-controls="' . esc_attr($menu_id) . '" aria-expanded="false" aria-label="' . esc_attr__('更多', 'aksrt') . '">';
 		$more .= '<i class="fa fas fa-ellipsis-h" aria-hidden="true"></i></button>';
 		$more .= '<div id="' . esc_attr($menu_id) . '" class="post-drop-meta__menu" aria-hidden="true">';
+		// 首项（参考主题 zib_get_post_more_dropdown 顺序）：管理员 → 禁封用户；
+		// 无禁封权限时不占位，由下方举报项兜底（「禁封优先、否则举报」互斥语义）。
+		$ban_item = function_exists('aksrt_get_post_author_ban_item')
+			? aksrt_get_post_author_ban_item((int) get_post_field('post_author', $post_id), (string) $permalink)
+			: '';
+		$more .= $ban_item; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- helper escapes internally.
 		if ($edit_link) {
 			$more .= '<a href="' . esc_url($edit_link) . '" class="post-drop-meta__item"><i class="fa fas fa-edit" aria-hidden="true"></i><span>' . esc_html__('编辑文章', 'aksrt') . '</span></a>';
 		}
 		$more .= '<button type="button" class="post-drop-meta__item" data-share-copy data-share-url="' . esc_url((string) $permalink) . '"><i class="fa fas fa-link" aria-hidden="true"></i><span>' . esc_html__('复制链接', 'aksrt') . '</span></button>';
-		if (is_user_logged_in()) {
+		if ($ban_item === '' && is_user_logged_in()) {
 			$report_payload = wp_json_encode([
 				'target_type' => 'post',
 				'target_id'   => (int) $post_id,
 				'target_name' => get_the_title($post_id),
 			]);
 			$more .= '<button type="button" class="post-drop-meta__item" data-aksrt-report="' . esc_attr((string) $report_payload) . '"><i class="fa fas fa-flag" aria-hidden="true"></i><span>' . esc_html__('举报', 'aksrt') . '</span></button>';
-		} else {
+		} elseif ($ban_item === '') {
 			$more .= '<a href="' . esc_url($login_url) . '" class="post-drop-meta__item"><i class="fa fas fa-flag" aria-hidden="true"></i><span>' . esc_html__('登录后举报', 'aksrt') . '</span></a>';
 		}
 		$more .= '</div></div>';