feat(claim): 支持固定H5订单号领取与订单兑换有效性后台控制

- 数据库新增 099_order_claim_status.sql 迁移，扩展 claim_status、claim_status_reason 等字段
- 后端新增 /claims/h5/:orderNo、UID提交、分销提交接口，保留原有 token 接口双轨兼容
- 增加兑换有效性强拦截：暂停/关闭/退款/取消订单精准阻断并返回友好提示
- 后台新增 POST /admin/orders/:orderId/claim-status 接口与审计日志记录
- 前端管理后台（订单列表、详情页）支持 H5 兑换状态展示、一键复制链接及暂停/关闭/启用弹窗
- 前端领取页面适配 /h5/:orderNo 路由及暂停/关闭等状态的异常展示
- 验证方式：运行前后端类型检查、全量单元测试（后端 674、前端 132）及全量构建编译均通过

apps/frontend/tests/claim-path.test.ts

@@ -1,7 +1,12 @@
 import assert from 'node:assert/strict'
 import test from 'node:test'
 
-import { isClaimPath, resolveClaimToken } from '../src/utils/claim-path.ts'
+import {
+  isClaimPath,
+  isH5ClaimPath,
+  resolveClaimToken,
+  resolveH5ClaimOrderNo,
+} from '../src/utils/claim-path.ts'
 
 test('isClaimPath：只认路径式 /claim/<token>，容忍结尾斜杠', () => {
   assert.equal(isClaimPath('/claim/abc123'), true)
@@ -38,3 +43,20 @@ test('resolveClaimToken：取出并解码 token 片段', () => {
   assert.equal(resolveClaimToken('/claim/100%'), '100%')
   assert.equal(resolveClaimToken('/redeem'), '')
 })
+
+test('isH5ClaimPath：只认路径式 /h5/<orderNo>，容忍结尾斜杠', () => {
+  assert.equal(isH5ClaimPath('/h5/2623001922675146'), true)
+  assert.equal(isH5ClaimPath('/h5/2623001922675146/'), true)
+  assert.equal(isH5ClaimPath('/h5'), false)
+  assert.equal(isH5ClaimPath('/h5/'), false)
+  assert.equal(isH5ClaimPath('/h5/a/b'), false)
+  assert.equal(isH5ClaimPath('/claim/123'), false)
+})
+
+test('resolveH5ClaimOrderNo：正确解析并解码订单号', () => {
+  assert.equal(resolveH5ClaimOrderNo('/h5/2623001922675146'), '2623001922675146')
+  assert.equal(resolveH5ClaimOrderNo('/h5/2623001922675146?from=sms'), '2623001922675146')
+  assert.equal(resolveH5ClaimOrderNo('/h5/ORDER-001/'), 'ORDER-001')
+  assert.equal(resolveH5ClaimOrderNo('/claim/123'), '')
+})
+