已完成管理后台第二批 ASP.NET Core 10 迁移：

学校创建、修改
班级创建、修改
管理员创建、修改
管理员密码重置
自主注册开关
写入与审计日志保持同一事务
停用或重置管理员后自动清除其会话

src/Eis.Infrastructure/Administration/AdminMigrationOptions.cs

@@ -1,31 +1,43 @@
 namespace Eis.Infrastructure.Administration;
 
-public sealed record AdminMigrationOptions(bool NativeReadsEnabled)
+public sealed record AdminMigrationOptions(
+    bool NativeReadsEnabled,
+    bool NativeOrganizationWritesEnabled = false)
 {
     public static AdminMigrationOptions FromEnvironment(
         bool configuredNativeReadsEnabled,
         bool authenticationNativeEnabled,
-        bool sharesLegacySessions)
+        bool sharesLegacySessions,
+        bool configuredNativeOrganizationWritesEnabled = false)
     {
-        var enabled = ParseBoolean(
+        var readsEnabled = ParseBoolean(
             Environment.GetEnvironmentVariable("ADMIN_NATIVE_READS_ENABLED"),
             configuredNativeReadsEnabled);
-        if (enabled && !authenticationNativeEnabled)
+        var organizationWritesEnabled = ParseBoolean(
+            Environment.GetEnvironmentVariable("ADMIN_NATIVE_ORGANIZATION_WRITES_ENABLED"),
+            configuredNativeOrganizationWritesEnabled);
+        if (organizationWritesEnabled && !readsEnabled)
         {
             throw new InvalidOperationException(
-                "启用原生管理端读取接口前必须同时设置 AUTH_NATIVE_ENABLED=true");
+                "启用原生组织维护接口前必须同时设置 ADMIN_NATIVE_READS_ENABLED=true");
+        }
+        var anyNativeAdminEndpointEnabled = readsEnabled || organizationWritesEnabled;
+        if (anyNativeAdminEndpointEnabled && !authenticationNativeEnabled)
+        {
+            throw new InvalidOperationException(
+                "启用原生管理端接口前必须同时设置 AUTH_NATIVE_ENABLED=true");
         }
 
         var allowMemoryForIsolatedTesting = ParseBoolean(
             Environment.GetEnvironmentVariable("ADMIN_NATIVE_ALLOW_MEMORY"),
             fallback: false);
-        if (enabled && !sharesLegacySessions && !allowMemoryForIsolatedTesting)
+        if (anyNativeAdminEndpointEnabled && !sharesLegacySessions && !allowMemoryForIsolatedTesting)
         {
             throw new InvalidOperationException(
-                "管理端仍有写入接口需要转发给 Node；启用原生管理端读取接口必须配置共享 Redis 会话");
+                "管理端仍有接口需要转发给 Node；启用原生管理端接口必须配置共享 Redis 会话");
         }
 
-        return new AdminMigrationOptions(enabled);
+        return new AdminMigrationOptions(readsEnabled, organizationWritesEnabled);
     }
 
     private static bool ParseBoolean(string? value, bool fallback) => value?.Trim().ToLowerInvariant() switch