修复Redis安全漏洞并新增日志查询接口

- docker-compose.yml: Redis去掉端口公网映射，加密码和强制单机模式，修复未授权访问被攻击为从节点的问题
- 新增 ApiJstCallLogController（/manage/jst/call-log/list）橘视厅调用日志查询接口
- 新增 AuditLogController（/manage/audit-log/list）审计日志查询接口
- 新增 Redis安全防护备忘.md 文档

src/main/java/io/as/modules/jst/controller/ApiJstCallLogController.java

@@ -0,0 +1,37 @@
+package io.as.modules.jst.controller;
+
+import io.as.common.utils.PageUtils;
+import io.as.common.utils.R;
+import io.as.modules.jst.service.ApiJstCallLogService;
+import io.swagger.annotations.Api;
+import io.swagger.annotations.ApiOperation;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * 橘视厅调用日志管理（管理后台，JWT鉴权）
+ * <p>记录调用橘视厅免密登录、卡密激活、会员查询等接口的出站请求与响应</p>
+ */
+@Api(tags = "橘视厅调用日志")
+@RestController
+@RequestMapping("/manage/jst/call-log")
+public class ApiJstCallLogController {
+
+	@Autowired
+	private ApiJstCallLogService apiJstCallLogService;
+
+	@ApiOperation("分页查询橘视厅调用日志")
+	@GetMapping("/list")
+	public R list(@RequestParam Map<String, Object> params) {
+		PageUtils page = apiJstCallLogService.queryPage(params);
+		Map<String, Object> data = new HashMap<>();
+		data.put("page", page);
+		return R.dataSuccess(data);
+	}
+}

src/main/java/io/as/modules/sys/controller/AuditLogController.java

@@ -0,0 +1,37 @@
+package io.as.modules.sys.controller;
+
+import io.as.common.utils.PageUtils;
+import io.as.common.utils.R;
+import io.as.modules.sys.service.AuditLogService;
+import io.swagger.annotations.Api;
+import io.swagger.annotations.ApiOperation;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * 审计日志管理（管理后台，JWT鉴权）
+ * <p>记录平台运营操作（分配/销售/转合同/绑定/解绑/激活/采购等）的审计轨迹</p>
+ */
+@Api(tags = "审计日志")
+@RestController
+@RequestMapping("/manage/audit-log")
+public class AuditLogController {
+
+	@Autowired
+	private AuditLogService auditLogService;
+
+	@ApiOperation("分页查询审计日志")
+	@GetMapping("/list")
+	public R list(@RequestParam Map<String, Object> params) {
+		PageUtils page = auditLogService.queryPage(params);
+		Map<String, Object> data = new HashMap<>();
+		data.put("page", page);
+		return R.dataSuccess(data);
+	}
+}