已完成管理后台第三批 ASP.NET Core 10 迁移：批量报名号申领与审批。

原生接口：
GET /api/admin/candidate-account-batches
POST /api/admin/candidate-account-batches
PATCH /api/admin/candidate-account-batches/{batchId}
实现包含：
校级管理员按班级提交名额
可配置多级审批流与待办负载分配
当前处理人及管理员层级校验
审批通过、退回和重复审批保护
终审时原子生成考生账号、报名号、初始密码和待补录资料
生成账号兼容现有 PBKDF2 登录及首次强制改密

src/Eis.Infrastructure/Administration/AdminMigrationOptions.cs

@@ -2,13 +2,15 @@ namespace Eis.Infrastructure.Administration;
 
 public sealed record AdminMigrationOptions(
     bool NativeReadsEnabled,
-    bool NativeOrganizationWritesEnabled = false)
+    bool NativeOrganizationWritesEnabled = false,
+    bool NativeAccountBatchesEnabled = false)
 {
     public static AdminMigrationOptions FromEnvironment(
         bool configuredNativeReadsEnabled,
         bool authenticationNativeEnabled,
         bool sharesLegacySessions,
-        bool configuredNativeOrganizationWritesEnabled = false)
+        bool configuredNativeOrganizationWritesEnabled = false,
+        bool configuredNativeAccountBatchesEnabled = false)
     {
         var readsEnabled = ParseBoolean(
             Environment.GetEnvironmentVariable("ADMIN_NATIVE_READS_ENABLED"),
@@ -16,12 +18,15 @@ public sealed record AdminMigrationOptions(
         var organizationWritesEnabled = ParseBoolean(
             Environment.GetEnvironmentVariable("ADMIN_NATIVE_ORGANIZATION_WRITES_ENABLED"),
             configuredNativeOrganizationWritesEnabled);
-        if (organizationWritesEnabled && !readsEnabled)
+        var accountBatchesEnabled = ParseBoolean(
+            Environment.GetEnvironmentVariable("ADMIN_NATIVE_ACCOUNT_BATCHES_ENABLED"),
+            configuredNativeAccountBatchesEnabled);
+        if ((organizationWritesEnabled || accountBatchesEnabled) && !readsEnabled)
         {
             throw new InvalidOperationException(
                 "启用原生组织维护接口前必须同时设置 ADMIN_NATIVE_READS_ENABLED=true");
         }
-        var anyNativeAdminEndpointEnabled = readsEnabled || organizationWritesEnabled;
+        var anyNativeAdminEndpointEnabled = readsEnabled || organizationWritesEnabled || accountBatchesEnabled;
         if (anyNativeAdminEndpointEnabled && !authenticationNativeEnabled)
         {
             throw new InvalidOperationException(
@@ -37,7 +42,7 @@ public sealed record AdminMigrationOptions(
                 "管理端仍有接口需要转发给 Node；启用原生管理端接口必须配置共享 Redis 会话");
         }
 
-        return new AdminMigrationOptions(readsEnabled, organizationWritesEnabled);
+        return new AdminMigrationOptions(readsEnabled, organizationWritesEnabled, accountBatchesEnabled);
     }
 
     private static bool ParseBoolean(string? value, bool fallback) => value?.Trim().ToLowerInvariant() switch