Add admin user moderation: block/unblock, reports, matches list, photo review

- User blocking (with reason) now closes the auth gap immediately — a
  blocked user's still-valid access token stops working on the next
  request, not just on their next OTP/refresh.
- Admin-created reports (moderation notes) per user, viewable in a history
  list independent of block status.
- GET /admin/users: full paginated, searchable user list with report counts.
- GET /admin/matches: all matches across the app ("friends" who mutually
  liked each other), for admin visibility.
- GET/DELETE /admin/photos: paginated feed of every uploaded photo with
  uploader info, so admins can review and remove content without going
  user-by-user.
- Per-user activity: monitoring requests can now be filtered by user_id, so
  a user's detail page can show their recent API activity.
- Batched the profile-selections query in fullProfilePayload (was 6 queries
  per view, now 1) for consistency with the earlier N+1 fixes.

cmd/api/main.go

@@ -49,6 +49,7 @@ func main() {
 	swipeRepo := repository.NewSwipeRepository(db)
 	matchRepo := repository.NewMatchRepository(db)
 	messageRepo := repository.NewMessageRepository(db)
+	reportRepo := repository.NewReportRepository(db)
 
 	// -------- Utils / Infra --------
 	jwtManager := utils.NewJWTManager(
@@ -70,8 +71,8 @@ func main() {
 		cfg.OTPExpirySeconds, cfg.OTPLength, cfg.OTPHashSecret,
 	)
 	onboardingService := service.NewOnboardingService(userRepo, optionRepo, questionRepo, photoRepo)
-	adminService := service.NewAdminService(optionRepo, questionRepo, userRepo)
 	profileService := service.NewProfileService(photoRepo, userRepo, photoStorage)
+	adminService := service.NewAdminService(optionRepo, questionRepo, userRepo, reportRepo, matchRepo, photoRepo, profileService)
 	discoveryService := service.NewDiscoveryService(userRepo, photoRepo, swipeRepo, matchRepo, optionRepo, questionRepo)
 	chatService := service.NewChatService(matchRepo, messageRepo, userRepo, photoRepo)
 	backupService := service.NewBackupService(cfg, "./backups")