feat(users): medal auto-grant + aksrt_get_user_name chrome

Add AKSRT_User_Badges::auto_evaluate on login for get_type metrics,
introduce aksrt_get_user_name (auth→wear medal→level→follow order),
wire single author bar/card, and document transfer/withdraw default-closed
semantics on capabilities page. audit errors=0.

assets/admin/src/pages/permissions/PermissionsCapabilities.vue

@@ -11,6 +11,12 @@
       </template>
     </PageHeader>
 
+    <n-alert type="warning" :show-icon="true" style="margin: 12px 0 16px;">
+      转账/提现（balance_transfer、points_transfer、balance_withdraw）默认 <b>exclude all</b>，与 Zibll 一致：未在矩阵中为角色/等级/VIP/认证打开前，前台入口会隐藏或拒绝。
+      medal_manually_set 控制谁可授予徽章；管理员 manage_options 始终可通过。
+    </n-alert>
+
+
     <n-spin :show="loading" style="width: 100%; min-height: 240px;">
       <n-card class="aksrt-section-card" v-if="summary.cap_count">
         <div class="aksrt-section-header">