feat(admin): 续费订单支持手工绑定订阅（attach-subscription）+ 时区改为 Asia/Shanghai

app/Http/Controllers/Admin/PlatformOrderController.php

@@ -645,6 +645,67 @@ class PlatformOrderController extends Controller
         ]);
     }
 
+    /**
+     * 治理动作：为订单手工绑定订阅（用于“续费缺订阅”脏数据修复）。
+     *
+     * 口径：
+     * - 仅平台管理员可操作（ensurePlatformAdmin）
+     * - 仅允许续费单绑定订阅
+     * - 订阅必须与订单 merchant_id / plan_id 一致，避免串单
+     * - 写入 meta.audit 留痕
+     */
+    public function attachSubscription(Request $request, PlatformOrder $order): RedirectResponse
+    {
+        $admin = $this->ensurePlatformAdmin($request);
+
+        $data = $request->validate([
+            'site_subscription_id' => ['required', 'integer', 'exists:site_subscriptions,id'],
+        ]);
+
+        if ((string) ($order->order_type ?? '') !== 'renewal') {
+            return redirect()->back()->with('warning', '仅「续费」类型订单允许绑定订阅。');
+        }
+
+        if ((int) ($order->site_subscription_id ?? 0) > 0) {
+            return redirect()->back()->with('warning', '该订单已绑定订阅，无需重复操作。');
+        }
+
+        $subId = (int) $data['site_subscription_id'];
+        $sub = SiteSubscription::query()->with(['merchant', 'plan'])->findOrFail($subId);
+
+        // 强约束：订阅上下文必须与订单一致
+        if ((int) ($sub->merchant_id ?? 0) !== (int) ($order->merchant_id ?? 0)) {
+            return redirect()->back()->withErrors([
+                'site_subscription_id' => '订阅所属站点与订单站点不一致，禁止绑定（避免串单）。',
+            ]);
+        }
+        if ((int) ($sub->plan_id ?? 0) !== (int) ($order->plan_id ?? 0)) {
+            return redirect()->back()->withErrors([
+                'site_subscription_id' => '订阅套餐与订单套餐不一致，禁止绑定（避免跨套餐续费）。',
+            ]);
+        }
+
+        $order->site_subscription_id = $sub->id;
+
+        $meta = (array) ($order->meta ?? []);
+        $audit = (array) (data_get($meta, 'audit', []) ?? []);
+        $audit[] = [
+            'action' => 'attach_subscription',
+            'scope' => 'single',
+            'at' => now()->toDateTimeString(),
+            'admin_id' => $admin->id,
+            'subscription_id' => $sub->id,
+            'subscription_no' => (string) ($sub->subscription_no ?? ''),
+            'note' => '续费缺订阅治理：手工绑定订阅',
+        ];
+        data_set($meta, 'audit', $audit);
+        $order->meta = $meta;
+
+        $order->save();
+
+        return redirect()->back()->with('success', '已绑定订阅：' . (string) ($sub->subscription_no ?? $sub->id));
+    }
+
     public function activateSubscription(Request $request, PlatformOrder $order, SubscriptionActivationService $service): RedirectResponse
     {
         $admin = $this->ensurePlatformAdmin($request);