feat(users): govern profiles and access

Normalize fixed profile fields, profile actions, and the five-column capability matrix for comments, uploads, and downloads.

assets/admin/src/pages/SiteSettings.vue

@@ -24,12 +24,6 @@
             </template>
           </n-form-item>
 
-          <n-form-item v-if="basic.comment_enabled" label="必须注册才能评论">
-            <n-switch v-model:value="basic.comment_requires_registration">
-              <template #checked>是</template>
-              <template #unchecked>否</template>
-            </n-switch>
-          </n-form-item>
         </n-form>
       </n-card>
 
@@ -123,7 +117,6 @@ const saving = ref(false)
 // 后端 /settings/basic 返回基础字段；auth 相关字段由 /settings/auth 独立维护。
 const basic = reactive({
   comment_enabled: true,
-  comment_requires_registration: false,
   icp_number: '',
   police_number: '',
   lazyload_enabled: true,
@@ -139,7 +132,6 @@ async function loadAll() {
     if (basicRes?.code === 'success' && basicRes.data) {
       const d = basicRes.data
       basic.comment_enabled = d.comment_enabled !== false
-      basic.comment_requires_registration = !!d.comment_requires_registration
       basic.icp_number = d.icp_number || ''
       basic.police_number = d.police_number || ''
       basic.lazyload_enabled = d.lazyload_enabled !== false
@@ -159,7 +151,6 @@ async function handleSave() {
   try {
     const basicPayload = {
       comment_enabled: basic.comment_enabled,
-      comment_requires_registration: basic.comment_requires_registration,
       icp_number: basic.icp_number,
       police_number: basic.police_number,
       lazyload_enabled: basic.lazyload_enabled,