feat(identity+admin): CRM analytics + customer notes + user power-actions

Modeled on the legacy DivineGateWeb admin (CRM + Security/* actions):
- identity-svc AdminService + AdminController (admin-gated):
  - GET /v1/admin/crm/analytics — signups/buyers/conversion/revenue + daily series
    (from identity.users + identity.payments)
  - GET/PUT /v1/users/{id}/crm — tags / note / pipeline status (user_crm table, mig 20)
  - power-actions: POST /v1/users/{id}/{balance,password,charge,moderator,grant-plan}
- admin UI: /admin/crm dashboard (funnel cards + daily signup/revenue bars);
  per-user "مدیریت" modal in Users (balance, render charge, plan days, password,
  moderator, CRM notes)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

messages/en.json

@@ -325,7 +325,8 @@
       "discounts": "Discounts",
       "siteSettings": "Settings",
       "messaging": "Messaging",
-      "marketing": "Marketing"
+      "marketing": "Marketing",
+      "crm": "CRM"
     },
     "appAdminNodesPage": {
       "title": "Render Nodes",