feat: complete unified plugin admin v1.1.0

docs/BUSINESS_PLUGIN_ARCHITECTURE.md

@@ -7,9 +7,9 @@ flowchart TD
   B[管理员浏览器] --> C[Core custom_menu_items]
   C --> I[Core /custom/:id sandbox iframe]
   I --> P[反向代理 /extensions/:plugin-id/]
-  P --> M[Plugin Control Plane]
-  M --> S[独立业务插件服务]
-  S --> A[Typed Core API Adapter]
+  P --> M[Plugin Control Plane / TDesign Shell]
+  M --> S[订阅业务模块 BFF / 独立服务]
+  M --> A[Typed Core API Adapter]
   A --> K[Core Auth/Admin API]
   K --> D[Core 权威账本与审计]
   M --> R[Plugin Registry / Revisions / Audit]
@@ -23,15 +23,16 @@ sequenceDiagram
   participant B as Browser
   participant P as Plugin BFF
   participant C as Core
-  B->>P: POST /login
+  B->>P: POST /login（唯一登录入口）
   P->>C: POST /api/v1/auth/login
   C-->>P: access/refresh 或 2FA challenge
   P->>C: POST /api/v1/auth/login/2fa (按需)
   P->>C: GET /api/v1/auth/me
   C-->>P: role=admin
-  P-->>B: HttpOnly plugin session + CSRF token
-  B->>P: GET /api/plugins
+  P-->>B: 唯一 HttpOnly plugin session + CSRF token
+  B->>P: GET /api/plugins 或 /modules/subscription/*
   P->>C: Bearer Core JWT + X-Request-ID
+  P->>S: 复用同一管理员会话调用订阅模块
   P-->>B: 脱敏业务数据
 ```