feat(ops): 增加运行时性能看板

docs/architecture.md

@@ -147,6 +147,15 @@ V2.6 introduces a database-backed background job runtime for server-side refresh
 
 This runtime is intentionally DB-backed first. Redis is already available in deployment, but V2.6 jobs need transactional dedupe with domain writes more than high-throughput queue semantics.
 
+## Runtime Ops Dashboard (V2.6)
+
+V2.6 adds an Ops runtime surface for local operators and future production admins:
+
+- Backend: `OpsModule` exposes `GET /api/v1/ops/runtime`, reading recent in-memory slow API request events, recent in-memory slow Prisma query events, `background_jobs` queue rows, and dirty `xiaobao_risk_summaries` count.
+- Capture: `ApiTimingInterceptor` and `PrismaService` still log slow events, and also append redacted bounded previews into the Ops runtime buffer. SQL query parameters are not exposed; request query strings and key-like values are stripped or redacted.
+- Jobs: the dashboard summarizes queued/running/succeeded/failed jobs by type and shows recent terminal failures with redacted `lastError`.
+- Permissions: the frontend route is guarded by `ops:view`. Backend RBAC is represented by `OpsPermissionAdapter` until the V2.5 RBAC contract lands, so the replacement point is explicit instead of hard-coupled to temporary role data.
+
 ## 生产部署层（2026-07-01）
 
 当前仓库已补齐云服务器生产部署基线：