feat(user-ban): frontend ban modal replaces the backend restrictions tab

1:1 replicate the reference theme user-ban flow on the frontend:

- Ban/unban modal rendered by inc/helpers/user-ban.php, opened via
  AksrtModalRuntime.openRemote (600px desktop dialog, 360px initial
  height, mobile bottom drawer, c-yellow colorful unban header).
- Three entry points wired: user homepage cover three-dot menu,
  comment section menu, article author card menu (ban item takes
  priority over report, matching the reference hook order).
- REST endpoints /user-ban/modal and /user-ban/set under aksrt/v1,
  guarded by check_permission, persisted through User\Restriction.
- Submit semantics match zib_ajax_set_user_ban: ban reloads the page,
  unban only closes the modal.

Cleanup (no dual-track): the backend ban-restrictions tab, its form
handlers and flash keys are removed; ticket processing links to the
frontend user homepage as the reference theme does; admin/report and
appeal notification URLs move to type/status query args.

Verification: 337/337 widget-system contract tests, 41/41 admin and
front-submit tests, php -l clean on all changed PHP files.

templates/parts/user/author-hero.php

@@ -61,6 +61,13 @@ $show_header_notification = !empty($notification_settings['enabled'])
 	&& in_array('user_home_header', (array) ($notification_settings['icon_show'] ?? []), true);
 $messages_url = $show_header_notification && function_exists('aksrt_get_messages_page_url') ? aksrt_get_messages_page_url() : '';
 $unread_count = $is_own ? aksrt_get_user_unread_notification_count($user_id) : 0;
+// 封面三点菜单末项：管理员 → 禁封/解封（参考主题 author_header_drop_lists 钩子语义，
+// 禁封权限优先于举报）；否则 → 举报用户（保持既有契约）。
+$cover_ban_html = function_exists('aksrt_get_user_cover_menu_action_html')
+	? aksrt_get_user_cover_menu_action_html($user_id)
+	: '';
+$show_cover_report = $cover_ban_html === '' && $show_report && !$is_own;
+$show_cover_menu = $has_more_details || $show_cover_report || $cover_ban_html !== '';
 ?><div class="aksrt-author-hero<?php echo $show_cover ? '' : ' aksrt-author-hero--no-cover'; ?>">
 	<?php if ($show_cover) : ?>
 	<div class="aksrt-author-hero__cover">
@@ -74,12 +81,12 @@ $unread_count = $is_own ? aksrt_get_user_unread_notification_count($user_id) : 0
 			</span>
 		</div>
 		<?php endif; ?>
-		<?php if ($has_more_details || ($show_report && !$is_own)) : ?>
+		<?php if ($show_cover_menu) : ?>
 		<div class="aksrt-cover-menu aksrt-cover-menu--author" data-aksrt-menu>
 			<button type="button" class="aksrt-cover-menu__trigger" aria-haspopup="true" aria-expanded="false" aria-label="<?php esc_attr_e('个人主页操作', 'aksrt'); ?>"><i class="fa fas fa-ellipsis-h" aria-hidden="true"></i></button>
 			<div class="aksrt-cover-menu__panel" role="menu" hidden>
 				<?php if ($has_more_details) : ?><button type="button" role="menuitem" data-aksrt-profile-details><i class="fa fas fa-address-card" aria-hidden="true"></i><?php esc_html_e('更多资料', 'aksrt'); ?></button><?php endif; ?>
-				<?php if ($show_report && !$is_own) : ?>
+				<?php if ($show_cover_report) : ?>
 					<?php
 					// 统一举报契约：report.js 弹窗展示被举报对象（头像 + 名称）。
 					$report_payload = [
@@ -92,6 +99,10 @@ $unread_count = $is_own ? aksrt_get_user_unread_notification_count($user_id) : 0
 					<?php if (is_user_logged_in()) : ?><button type="button" role="menuitem" data-aksrt-report="<?php echo esc_attr(wp_json_encode($report_payload)); ?>"><i class="fa fas fa-flag" aria-hidden="true"></i><?php esc_html_e('举报用户', 'aksrt'); ?></button>
 					<?php else : ?><a role="menuitem" href="<?php echo esc_url(aksrt_get_login_url($home_url)); ?>"><i class="fa fas fa-flag" aria-hidden="true"></i><?php esc_html_e('举报用户', 'aksrt'); ?></a><?php endif; ?>
 				<?php endif; ?>
+				<?php
+				// 禁封/解封入口（user-ban.js 的 [data-aksrt-ban] 委托）。
+				echo $cover_ban_html; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- helper escapes internally.
+				?>
 			</div>
 		</div>
 		<?php endif; ?>