新功能(#3): 抽奖 Stage 1 收官 — 用户 API + 后台 CRUD + 集成

Closes HIF-3

Stage 1 完整闭环 PR C：用户 API + 后台 CRUD + 抽奖事务服务 + 审计 + QA curl。合并后 Stage 1 可交测试。

架构师 review R1（rulecaps depth≤8/nodes≤64/bytes≤8KB）+ R2（InviteHook source_ref 加 order: 前缀）已全部落地。

- 迁移 02158_admin_action_log：后台写操作审计
- xerr 100xxx 段：抽奖错误码（NotEligible/NoChances/ActivityEnded/RateLimited/NotClaimable/InternalError/RuleTooDeep/RuleTooMany/RuleTooLarge）
- feature flag config.Lottery.Enable 默认 false，合并后线上零副作用
- draw service：feature flag → rate limit → pre-tx reads → nonce dedupe → Consume → Pick → 乐观扣库存 → 双快照 → Dispatch → finalize
- 用户 API 4 个：GET /config、POST /draw、GET /records、POST /claim（Stage 1 返回 100010）
- 后台 CRUD：活动 / 奖品 / rules PUT（rulecaps gate）/ chances/grant
- audit.WriteAdminAction：与调用方 tx 同生共死，SHA1 body 摘要
- QA 脚本：qa/lottery/stage1_curl.sh 全链路 curl

测试覆盖：model 76.5% / draw 69% / handler 68.3% / hook 91.9% / rulecaps 87.8% / audit 100%
100 并发抢库存 + 10000 次概率分布 e2e 推 QA 环境（sqlmock 无法忠实模拟 InnoDB 行锁）
CI 全绿：构建/Vet/测试 + golangci-lint

internal/svc/serviceContext.go

@@ -11,6 +11,8 @@ import (
 	"github.com/perfect-panel/server/pkg/storage"
 
 	"github.com/perfect-panel/server/internal/config"
+	lotterydraw "github.com/perfect-panel/server/internal/logic/lottery/draw"
+	lotteryhandler "github.com/perfect-panel/server/internal/logic/lottery/handler"
 	lotteryhook "github.com/perfect-panel/server/internal/logic/lottery/hook"
 	"github.com/perfect-panel/server/internal/model/ads"
 	"github.com/perfect-panel/server/internal/model/announcement"
@@ -74,9 +76,11 @@ type ServiceContext struct {
 	IAPAppleTransactionModel iapapple.Model
 
 	// Lottery (Stage 1)
-	LotteryChance     lottery.ChanceService
-	LotteryLedger     lottery.LedgerService
-	LotteryInviteHook lotteryhook.InviteHook
+	LotteryChance      lottery.ChanceService
+	LotteryLedger      lottery.LedgerService
+	LotteryInviteHook  lotteryhook.InviteHook
+	LotteryRegistry    lottery.Registry
+	LotteryDrawService *lotterydraw.Service
 
 	Restart               func() error
 	TelegramBot           *tgbotapi.BotAPI
@@ -160,6 +164,36 @@ func NewServiceContext(c config.Config) *ServiceContext {
 	srv.LotteryChance = lottery.NewChanceService(db)
 	srv.LotteryLedger = lottery.NewLedgerService()
 	srv.LotteryInviteHook = lotteryhook.NewInviteHook(db, srv.LotteryChance)
+
+	// PR C: PrizeHandler registry + Draw service wiring. Handlers are hooked in
+	// order: noop → vpn_duration → commission. Later registrations override.
+	registry := lottery.NewRegistry()
+	registry.Register(lottery.NewNoopHandler())
+	registry.Register(lotteryhandler.NewVPNDurationHandler(lotteryhandler.VPNDurationDeps{
+		UserModel:            srv.UserModel,
+		Ledger:               srv.LotteryLedger,
+		DB:                   db,
+		ResolveEffectiveUser: lotteryhandler.DefaultResolveEffectiveUser(db),
+	}))
+	registry.Register(lotteryhandler.NewCommissionHandler(lotteryhandler.CommissionDeps{
+		Ledger:             srv.LotteryLedger,
+		UpdateCommission:   srv.UserModel.UpdateCommission,
+		WriteCommissionLog: lotteryhandler.WriteCommissionLog,
+	}))
+	srv.LotteryRegistry = registry
+
+	drawLimiter := limit.NewPeriodLimit(1, 1, rds, "lottery:draw:rate:")
+	srv.LotteryDrawService = lotterydraw.NewService(lotterydraw.Deps{
+		DB:          db,
+		Enabled:     c.Lottery.Enable,
+		RateLimiter: lotterydraw.NewRedisRateLimiter(drawLimiter),
+		Chance:      srv.LotteryChance,
+		Evaluator:   lottery.NewRuleEvaluator(),
+		Picker:      lottery.NewWeightedPicker(0),
+		Registry:    registry,
+		// ContextBuilder 留 nil：PR C 阶段无活动配置门槛不评估用户上下文；后续
+		// 可接一个真实的 RuleContextBuilder（读订阅/邀请/充值/tags）。
+	})
 	if c.S3.Enable {
 		s3Store, err := storage.NewS3Store(context.Background(), c.S3)
 		if err != nil {