chore(architecture): refresh dependency baseline

docs/architecture-overview.md

@@ -755,7 +755,7 @@ flowchart LR
 | 指标 | 当前值 |
 |---|---:|
 | Python 模块 | 973 |
-| 内部导入边 | 8,261 |
+| 内部导入边 | 8,263 |
 | 非平凡 SCC | 1（精确 containment 的 TMDB 移植包环） |
 | Application / Chain 具体 Adapter 直连 | 0 / 0 |
 | Direct egress | 53（债务已清零，53 条精确 containment） |

docs/architecture/optimization-checklist.md

@@ -94,7 +94,7 @@ ARCH-201 至 ARCH-204 均达到实现、验证、提交、推送和远端门禁
 
 | 指标 | 当前值 | 解释 |
 |---|---:|---|
-| 宿主 Python 模块 / 内部依赖边 | 976 / 8,261 | `dependency-baseline.json` 当前快照 |
+| 宿主 Python 模块 / 内部依赖边 | 976 / 8,263 | `dependency-baseline.json` 当前快照 |
 | 非平凡 SCC | 1 | 仅保留精确 containment 的 29 模块 TMDB 移植包环 |
 | 跨层 DB 边界债务 | 0 | Application、Chain、API、Agent、Runtime、Workflow 到 DB 的受控债务均为零 |
 | Model/Oper 事务债务 | 0 | 自建 Session、自动事务装饰器、直接 commit/rollback 等基线均为零 |

tests/fixtures/architecture/dependency-baseline.json

@@ -1089,8 +1089,8 @@
       "runtime_only": true
     }
   },
-  "edge_count": 8261,
-  "edge_sha256": "062c4385a99cd29502ce65387bda0f768399c824f293db9b2d90e108f8c340b3",
+  "edge_count": 8263,
+  "edge_sha256": "461585d4f5b0334163e10192294a20261e68f47f39094326f7c4590c4f1451cc",
   "edges": [
     "app -> app.foundation",
     "app -> app.foundation.environment",
@@ -2452,7 +2452,6 @@
     "app.api.endpoints.mfa -> app.application.security.auth",
     "app.api.endpoints.mfa -> app.application.security.otp",
     "app.api.endpoints.mfa -> app.application.security.passkey",
-    "app.api.endpoints.mfa -> app.application.security.token",
     "app.api.endpoints.mfa -> app.application.security.user",
     "app.api.endpoints.mfa -> app.runtime",
     "app.api.endpoints.mfa -> app.runtime.log",
@@ -3554,6 +3553,9 @@
     "app.application.security.url -> app.runtime",
     "app.application.security.url -> app.runtime.coalesce",
     "app.application.security.url -> app.runtime.log",
+    "app.application.security.user -> app.application",
+    "app.application.security.user -> app.application.security",
+    "app.application.security.user -> app.application.security.token",
     "app.application.security.userconfig -> app.application",
     "app.application.security.userconfig -> app.application.database",
     "app.application.security.userconfig -> app.schemas",