feat(iam): v2 用户管理 RPC + F12 httpOnly Cookie

admin-portal §2.3 P1 阻塞项补齐：CreateUser/UpdateUser/DeleteUser 3 RPC

iam.repository/service/grpc.controller 实现 3 用户管理方法（含 bcrypt + 审计）

iam.controller 新增 POST /v1/iam/users + DELETE /v1/iam/users/:id（@RequirePermission(IAM_USER_MANAGE)）

iam.dto 新增 createUserSchema Zod 校验

F12 httpOnly Cookie：refresh_token 改为 httpOnly+Secure+SameSite=Strict Cookie 下发

extractRefreshToken 优先读 cookie 回退 body + buildRefreshTokenCookie/buildClearCookie

services/iam/src/shared/observability/logger.ts

@@ -1,16 +1,16 @@
-import pino from 'pino';
-import { env } from '../../config/env.js';
+import { pino } from "pino";
+import { env } from "../../config/env.js";
 
 export const logger = pino({
   level: env.LOG_LEVEL,
   base: {
-    service: 'iam',
-    version: '0.1.0',
+    service: "iam",
+    version: "0.1.0",
   },
   transport:
-    env.NODE_ENV === 'development'
+    env.NODE_ENV === "development"
       ? {
-          target: 'pino-pretty',
+          target: "pino-pretty",
           options: { colorize: true },
         }
       : undefined,