Merge current main with the U3 component composition

Why: The target branch advanced Core, Frontend, UI and Backend pointers during the approved U3 revision.

Evidence: Core go test ./...; Backend go test ./...; UI 165 tests and typecheck; Frontend 224 tests and build passed on the resolved component trees.

Impact: Preserve both the current main settings/account/duties work and the U3 candidate at merged component SHAs.

Refs: U3 quality revision r0.2, task-sync receipt fast-slow-u2-u3-r02-sync-20261013.json

policy/facts.md

@@ -14,3 +14,5 @@
 | F2 | API token 存在且可用（值在 ~/.secrets/gitea，文件为 markdown 列表格式 `- ACCESS_TOKEN=…`，不入仓不回显） | `t=$(sed -n "s/^[ -]*ACCESS_TOKEN=//p" ~/.secrets/gitea); test -n "$t" && curl -fsS -m 10 -o /dev/null -H "Authorization: token $t" https://git-home.u1680832.nyat.app:30319/api/v1/user` | 2026-10-05 | 30 |
 | F3 | Git over SSH 可达：ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/<Repo>.git（key ~/.ssh/home_gitea） | `GIT_SSH_COMMAND="ssh -i ~/.ssh/home_gitea -o BatchMode=yes" git ls-remote ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Development-Guidelines.git HEAD` | 2026-10-05 | 30 |
 | F4 | 旧端点 git-panel.u1680832.nyat.app:30319 已失效（TLS 握手失败），不得使用 | `! curl -fsS -m 8 https://git-panel.u1680832.nyat.app:30319/api/v1/version` | 2026-10-05 | 180 |
+| F5 | 基座 users 表存有姓名（name 列，CreateAccount/ListUsersAdmin 读写；EXT-19 目录自 P3 起向授权管理读面下发） | `cd modules/backend && go test ./internal/app/ -run TestInprocHostSearchAccounts -count=1` | 2026-10-13 | 180 |
+| F6 | 基座账号无停用位（users 表无 disabled；EXT-19 Valid 恒为存在性）——停用机制未实现，不得当已具备 | `cd modules/backend && grep -rn "disabled\|Disabled" internal/store/auth.go pkg/extension/extension.go` | 2026-10-13 | 180 |