fix: 同步原生账号启停与商务审核状态

internal/data/system/user_strict_test.go

@@ -40,6 +40,9 @@ func TestStrictUserMutationsRejectOutsideTargetAndAllowSelfPassword(t *testing.T
 	if err := repo.UpdateUser(ctx, &system.User{ID: users[2].ID, NickName: "changed"}); err == nil {
 		t.Fatal("UpdateUser() accepted an out-of-scope target")
 	}
+	if err := repo.UpdateUserWithStatus(ctx, &system.User{ID: users[2].ID, Enable: 1}, func(int) (int, error) { t.Fatal("越权时不应执行状态策略"); return 0, nil }); err == nil {
+		t.Fatal("启停同步接口放行了角色范围外用户")
+	}
 	if err := repo.DeleteUser(ctx, users[2].ID); err == nil {
 		t.Fatal("DeleteUser() accepted an out-of-scope target")
 	}