feat(identity+admin): CRM analytics + customer notes + user power-actions

Modeled on the legacy DivineGateWeb admin (CRM + Security/* actions):
- identity-svc AdminService + AdminController (admin-gated):
  - GET /v1/admin/crm/analytics — signups/buyers/conversion/revenue + daily series
    (from identity.users + identity.payments)
  - GET/PUT /v1/users/{id}/crm — tags / note / pipeline status (user_crm table, mig 20)
  - power-actions: POST /v1/users/{id}/{balance,password,charge,moderator,grant-plan}
- admin UI: /admin/crm dashboard (funnel cards + daily signup/revenue bars);
  per-user "مدیریت" modal in Users (balance, render charge, plan days, password,
  moderator, CRM notes)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

services/identity/FlatRender.IdentitySvc/Infrastructure/Data/IdentityDbContext.cs

@@ -28,6 +28,9 @@ public class IdentityDbContext(DbContextOptions<IdentityDbContext> options) : Db
     public DbSet<Discount> Discounts => Set<Discount>();
     public DbSet<UsedDiscount> UsedDiscounts => Set<UsedDiscount>();
 
+    // CRM
+    public DbSet<UserCrm> UserCrms => Set<UserCrm>();
+
     // Gamification
     public DbSet<Quest> Quests => Set<Quest>();
     public DbSet<UserQuestProgress> UserQuestProgresses => Set<UserQuestProgress>();
@@ -47,6 +50,12 @@ public class IdentityDbContext(DbContextOptions<IdentityDbContext> options) : Db
         ConfigureUsers(mb);
         ConfigureBilling(mb);
         ConfigureGamification(mb);
+
+        mb.Entity<UserCrm>(e =>
+        {
+            e.ToTable("user_crm");
+            e.HasKey(x => x.UserId);
+        });
     }
 
     private static void ConfigureTenants(ModelBuilder mb)