feat(admin): Phase 3 平台团队+用户管理 — 列/启停/详情/强制改密 + 团队停用拦登录

后端:adminpanel 增 teams(列/详情/启停)+ users(列/启停/强制改密),AdminTeam/User 序列化器;
login 校验团队 status,停用团队成员拒登;停用用户清 token、禁停平台超管;全程 IsPlatformAdmin + 审计。
前端:adminApi teams/users 系列;Admin 团队页(筛选+搜索+详情弹窗+启停)、用户页(启停+改密弹窗,超管行禁操作)。
测试:adminpanel 19 + accounts 22 = 41 单测过;无头 e2e _admin-p3.mjs 7 断言过 + 0 console error
(UI 停用团队→成员登录 400→启用→200;UI 改密→新密码登录 200);tsc+build 绿。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

core/backend/apps/accounts/views.py

@@ -12,7 +12,7 @@ from rest_framework.response import Response
 
 from apps.common.api import get_current_team
 
-from .models import Invitation, LoginSession, TeamMember, User, UserPreference
+from .models import Invitation, LoginSession, Team, TeamMember, User, UserPreference
 from .serializers import (
     InvitationSerializer,
     LoginSerializer,
@@ -124,6 +124,9 @@ def login(request):
     if user is None or user.is_disabled:
         return Response({"detail": "invalid credentials"}, status=status.HTTP_400_BAD_REQUEST)
     team = current_team_or_none(user)
+    # 团队被平台超管停用:其成员一律不准登录(平台超管无团队,不受影响)
+    if team is not None and team.status == Team.Status.DISABLED:
+        return Response({"detail": "团队已停用,请联系平台管理员"}, status=status.HTTP_400_BAD_REQUEST)
     token, _ = Token.objects.get_or_create(user=user)
     record_login_session(request, user)
     return Response(auth_payload(user, team, token))