Add admin user moderation: block/unblock, reports, matches list, photo review

- User blocking (with reason) now closes the auth gap immediately — a
  blocked user's still-valid access token stops working on the next
  request, not just on their next OTP/refresh.
- Admin-created reports (moderation notes) per user, viewable in a history
  list independent of block status.
- GET /admin/users: full paginated, searchable user list with report counts.
- GET /admin/matches: all matches across the app ("friends" who mutually
  liked each other), for admin visibility.
- GET/DELETE /admin/photos: paginated feed of every uploaded photo with
  uploader info, so admins can review and remove content without going
  user-by-user.
- Per-user activity: monitoring requests can now be filtered by user_id, so
  a user's detail page can show their recent API activity.
- Batched the profile-selections query in fullProfilePayload (was 6 queries
  per view, now 1) for consistency with the earlier N+1 fixes.

internal/dto/admin_dto.go

@@ -37,3 +37,13 @@ type UpdateProfileQuestionRequest struct {
 type RejectUserRequest struct {
 	Reason string `json:"reason" binding:"required,min=3,max=500"`
 }
+
+// BlockUserRequest بلاک کردن یک کاربر توسط ادمین (دلیل الزامی است)
+type BlockUserRequest struct {
+	Reason string `json:"reason" binding:"required,min=3,max=500"`
+}
+
+// ReportUserRequest ثبت یک یادداشت نظارتی روی یک کاربر (دلیل الزامی است)
+type ReportUserRequest struct {
+	Reason string `json:"reason" binding:"required,min=3,max=500"`
+}

internal/dto/auth_dto.go

@@ -1,5 +1,7 @@
 package dto
 
+import "time"
+
 // RequestOTPRequest بدنه‌ی درخواست ارسال کد تایید
 type RequestOTPRequest struct {
 	Phone string `json:"phone" binding:"required"`
@@ -32,16 +34,19 @@ type AuthResponse struct {
 
 // UserProfile نمایش خلاصه‌ی پروفایل کاربر (بدون داده‌های حساس)
 type UserProfile struct {
-	ID              uint    `json:"id"`
-	Phone           string  `json:"phone"`
-	FirstName       string  `json:"first_name,omitempty"`
-	Gender          *string `json:"gender,omitempty"`
-	BirthDate       *string `json:"birth_date,omitempty"`
-	HeightCM        *int    `json:"height_cm,omitempty"`
-	WeightKG        *int    `json:"weight_kg,omitempty"`
-	CurrentStep     int     `json:"current_step"`
-	IsOnboarded     bool    `json:"is_onboarded"`
-	ApprovalStatus  string  `json:"approval_status"`
-	RejectionReason *string `json:"rejection_reason,omitempty"`
-	IsAdmin         bool    `json:"is_admin"`
+	ID              uint       `json:"id"`
+	Phone           string     `json:"phone"`
+	FirstName       string     `json:"first_name,omitempty"`
+	Gender          *string    `json:"gender,omitempty"`
+	BirthDate       *string    `json:"birth_date,omitempty"`
+	HeightCM        *int       `json:"height_cm,omitempty"`
+	WeightKG        *int       `json:"weight_kg,omitempty"`
+	CurrentStep     int        `json:"current_step"`
+	IsOnboarded     bool       `json:"is_onboarded"`
+	ApprovalStatus  string     `json:"approval_status"`
+	RejectionReason *string    `json:"rejection_reason,omitempty"`
+	IsAdmin         bool       `json:"is_admin"`
+	State           string     `json:"state"`
+	BlockedReason   *string    `json:"blocked_reason,omitempty"`
+	BlockedAt       *time.Time `json:"blocked_at,omitempty"`
 }