chore(sync): zsy_developcc 全量同步至 qyqy_develop（W26 口径）

- 分支内容对齐 qyqy_develop b6ec3aa，树完全一致（同步后 git diff 为空）
- 覆盖本轮全部交付：客服 Agent 重构（安全路由 / 五出口 / 记忆与画像 / RAG 全链路）
  + 开发文档 62 份编号体系（D1.1 v1.17 索引）
  + 新增 D2.10-客服Agent端到端答辩文档-2026-09-21.html
- 基线：e239eb7（2026-09-17 品牌口径统一快照），本提交为其直接后继

app/api/controllers/portfolio_analysis.py

@@ -0,0 +1,25 @@
+"""Read-only portfolio-analysis endpoint."""
+
+from fastapi import APIRouter, Depends
+
+from app.api.dependencies.auth import build_request_context
+from app.api.dependencies.rate_limit import enforce_rate_limit
+from app.api.schemas.portfolio_analysis import PortfolioAnalysisQuery
+from app.core.contracts import RequestContext
+from app.service.advisor_rollout_service import enforce_advisor_rollout
+from app.service.portfolio_analysis_service import PortfolioAnalysisService
+
+router = APIRouter(
+    prefix="/api/v1/advisor", tags=["advisor-portfolio-analysis"],
+    dependencies=[Depends(enforce_rate_limit), Depends(enforce_advisor_rollout)],
+)
+
+
+@router.post("/portfolio-analysis")
+async def analyze_portfolio(
+    payload: PortfolioAnalysisQuery,
+    context: RequestContext = Depends(build_request_context),  # noqa: B008
+) -> dict[str, object]:
+    return await PortfolioAnalysisService(enforce_profile_governance=True).analyze_for_agent(
+        payload, context
+    )