feat: add student video and profile experience

README.md

@@ -25,6 +25,7 @@
 - [`docs/migration/phase-3-tenant-isolation-and-shared-question-bank.md`](docs/migration/phase-3-tenant-isolation-and-shared-question-bank.md)
 - [`docs/migration/phase-4-external-provider-decoupling.md`](docs/migration/phase-4-external-provider-decoupling.md)
 - [`docs/migration/phase-5-backoffice-worker-operations.md`](docs/migration/phase-5-backoffice-worker-operations.md)
+- [`docs/migration/phase-7-student-experience-and-content-consumption.md`](docs/migration/phase-7-student-experience-and-content-consumption.md)
 
 ## 技术栈与分层
 
@@ -132,6 +133,7 @@ Tiku.IntegrationTests # API / EF 模型集成测试
 - Provider 配置统一落 `TenantExternalProvider` + `TenantSecret`。
 - `ConfigPublic` 只保存公开字段，例如 appId、merchantId、region、endpoint、bucketAlias、templateCode。
 - 密钥只通过 `SecretRef` 关联 `TenantSecret`，禁止把 secret/token/key/privateKey 写入公开配置。
+- AI 暂不实现；后续独立阶段默认使用 Microsoft Semantic Kernel，租户模型 API Key 仍走 `TenantExternalProvider(capability=ai)` + `TenantSecret`，业务层不直接引用 SK namespace。
 
 资源存储方向：
 
@@ -202,8 +204,12 @@ Tiku.Infrastructure/Persistence/Migrations/20260728031410_InitialSchema.cs
 - question bank 只读
 - vocabulary / handbook 只读
 - asset / image / app asset / video catalog 只读
+- student video search / play / progress
+- question video list / batch query
 - asset download / preview 授权签名
+- profile check-in / score events
 - tenant external providers / identity providers / payment providers 管理入口
+- tenant-content generic import preview / sync import / async import job / import detail
 - runtime bootstrap
 
 ## 新开发约束