已完成管理后台第一批只读功能的 ASP.NET Core 10 迁移：

原生接口：context、dashboard、schools、school-organization、admins、exams
保持超级、校级、班级管理员的数据范围及权限隔离
其余管理写入、审批流和考务编排仍由 Node 转发
新增 ADMIN_NATIVE_READS_ENABLED=true 开关，并强制要求原生认证和共享 Redis

src/Eis.Application/Administration/IAdminReadService.cs

@@ -0,0 +1,20 @@
+using System.Text.Json.Nodes;
+
+namespace Eis.Application.Administration;
+
+public sealed record AdminEndpointResult(int StatusCode, JsonObject Body);
+
+public interface IAdminReadService
+{
+    Task<AdminEndpointResult> GetContextAsync(string sessionToken, CancellationToken cancellationToken);
+
+    Task<AdminEndpointResult> GetDashboardAsync(string sessionToken, CancellationToken cancellationToken);
+
+    Task<AdminEndpointResult> GetSchoolsAsync(string sessionToken, CancellationToken cancellationToken);
+
+    Task<AdminEndpointResult> GetSchoolOrganizationAsync(string sessionToken, CancellationToken cancellationToken);
+
+    Task<AdminEndpointResult> GetAdminsAsync(string sessionToken, CancellationToken cancellationToken);
+
+    Task<AdminEndpointResult> GetExamsAsync(string sessionToken, CancellationToken cancellationToken);
+}