feat: harden loose-offline sync for user JWT, schema, and console ops

Enable Binding-scoped agent push/pull, empty-table schema ensure, SyncPage inspect/drop-table, default module import, and agent-bound publish docs from the 宇恒联调意见.

Co-authored-by: Cursor <cursoragent@cursor.com>

platform/internal/logic/applogic/agents.go

@@ -99,11 +99,14 @@ func (l *AgentAdminLogic) Create(req *types.AgentCreateReq) (*types.AgentCreateR
 		return nil, err
 	}
 	acc, secret, err := st.Create(l.ctx, authx.TenantID(l.ctx), authx.UserID(l.ctx), agentstore.CreateInput{
-		Name:     req.Name,
-		Perms:    perms,
-		AppSlugs: req.AppSlugs,
-		Status:   agentstore.StatusActive,
-		RoleID:   roleID,
+		Name:         req.Name,
+		Perms:        perms,
+		AppSlugs:     req.AppSlugs,
+		Status:       agentstore.StatusActive,
+		RoleID:       roleID,
+		ChannelID:    req.ChannelID,
+		OnlineDBID:   req.OnlineDBID,
+		DatabaseName: req.DatabaseName,
 	})
 	if err != nil {
 		return nil, err
@@ -161,6 +164,15 @@ func (l *AgentAdminLogic) Update(agentID int64, req *types.AgentUpdateReq) (*age
 	if req.AppSlugs != nil {
 		in.AppSlugs = req.AppSlugs
 	}
+	if req.ChannelID != nil {
+		in.ChannelID = req.ChannelID
+	}
+	if req.OnlineDBID != nil {
+		in.OnlineDBID = req.OnlineDBID
+	}
+	if req.DatabaseName != nil {
+		in.DatabaseName = req.DatabaseName
+	}
 	if req.RoleID != nil {
 		roleID, perms, err := l.resolvePerms(*req.RoleID, nil)
 		if err != nil {