feat(compliance): content moderation on model input and output — local lexicon, Aliyun adapter, free completion, admin log

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01N4f2nya58RoRu4yEmJgRGE

tests/test_api_server_security.py

@@ -1581,6 +1581,10 @@ def test_capability_audit_scans_registry_and_local_sources() -> None:
         'admin/feature-pricing',
         'admin/model-releases',
         'admin/models',
+        # 原值: admin/models 后面直接是 admin/orders
+        # 新值: 中间加入 admin/moderation-events
+        # 原因: 内容审核命中记录的只读后台页（2026-09-30 合规轮）是新的 app 路由
+        'admin/moderation-events',
         'admin/orders',
         'admin/packages',
         'admin/payments',