feat: 完成B端认证系统和商户管理模块测试补全

主要变更：
- 新增B端认证系统（后台+H5）：登录、登出、Token刷新、密码修改
- 完善商户管理和商户账号管理功能
- 补全单元测试（ShopService: 72.5%, ShopAccountService: 79.8%）
- 新增集成测试（商户管理+商户账号管理）
- 归档OpenSpec提案（add-shop-account-management, implement-b-end-auth-system）
- 完善文档（使用指南、API文档、认证架构说明）

测试统计：
- 13个测试套件，37个测试用例，100%通过率
- 平均覆盖率76.2%，达标

OpenSpec验证：通过（strict模式）

internal/routes/account.go

@@ -19,6 +19,7 @@ func registerAccountRoutes(api fiber.Router, h *admin.AccountHandler, doc *opena
 		Tags:    []string{"账号相关"},
 		Input:   new(model.CreateAccountRequest),
 		Output:  new(model.AccountResponse),
+		Auth:    true,
 	})
 
 	Register(accounts, doc, groupPath, "GET", "", h.List, RouteSpec{
@@ -26,6 +27,7 @@ func registerAccountRoutes(api fiber.Router, h *admin.AccountHandler, doc *opena
 		Tags:    []string{"账号相关"},
 		Input:   new(model.AccountListRequest),
 		Output:  new(model.AccountPageResult),
+		Auth:    true,
 	})
 
 	Register(accounts, doc, groupPath, "GET", "/:id", h.Get, RouteSpec{
@@ -33,6 +35,7 @@ func registerAccountRoutes(api fiber.Router, h *admin.AccountHandler, doc *opena
 		Tags:    []string{"账号相关"},
 		Input:   new(model.IDReq),
 		Output:  new(model.AccountResponse),
+		Auth:    true,
 	})
 
 	Register(accounts, doc, groupPath, "PUT", "/:id", h.Update, RouteSpec{
@@ -40,6 +43,7 @@ func registerAccountRoutes(api fiber.Router, h *admin.AccountHandler, doc *opena
 		Tags:    []string{"账号相关"},
 		Input:   new(model.UpdateAccountParams),
 		Output:  new(model.AccountResponse),
+		Auth:    true,
 	})
 
 	Register(accounts, doc, groupPath, "DELETE", "/:id", h.Delete, RouteSpec{
@@ -47,6 +51,7 @@ func registerAccountRoutes(api fiber.Router, h *admin.AccountHandler, doc *opena
 		Tags:    []string{"账号相关"},
 		Input:   new(model.IDReq),
 		Output:  nil,
+		Auth:    true,
 	})
 
 	// 账号-角色关联
@@ -62,6 +67,7 @@ func registerAccountRoutes(api fiber.Router, h *admin.AccountHandler, doc *opena
 		Tags:    []string{"账号相关"},
 		Input:   new(model.IDReq),
 		Output:  new([]model.Role),
+		Auth:    true,
 	})
 
 	Register(accounts, doc, groupPath, "DELETE", "/:account_id/roles/:role_id", h.RemoveRole, RouteSpec{
@@ -69,6 +75,7 @@ func registerAccountRoutes(api fiber.Router, h *admin.AccountHandler, doc *opena
 		Tags:    []string{"账号相关"},
 		Input:   new(model.RemoveRoleParams),
 		Output:  nil,
+		Auth:    true,
 	})
 
 	registerPlatformAccountRoutes(api, h, doc, basePath)
@@ -83,6 +90,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.PlatformAccountListRequest),
 		Output:  new(model.AccountPageResult),
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "POST", "", h.Create, RouteSpec{
@@ -90,6 +98,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.CreateAccountRequest),
 		Output:  new(model.AccountResponse),
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "GET", "/:id", h.Get, RouteSpec{
@@ -97,6 +106,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.IDReq),
 		Output:  new(model.AccountResponse),
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "PUT", "/:id", h.Update, RouteSpec{
@@ -104,6 +114,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.UpdateAccountParams),
 		Output:  new(model.AccountResponse),
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "DELETE", "/:id", h.Delete, RouteSpec{
@@ -111,6 +122,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.IDReq),
 		Output:  nil,
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "PUT", "/:id/password", h.UpdatePassword, RouteSpec{
@@ -118,6 +130,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.UpdatePasswordParams),
 		Output:  nil,
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "PUT", "/:id/status", h.UpdateStatus, RouteSpec{
@@ -125,6 +138,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.UpdateStatusParams),
 		Output:  nil,
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "POST", "/:id/roles", h.AssignRoles, RouteSpec{
@@ -132,6 +146,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.AssignRolesParams),
 		Output:  nil,
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "GET", "/:id/roles", h.GetRoles, RouteSpec{
@@ -139,6 +154,7 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.IDReq),
 		Output:  new([]model.Role),
+		Auth:    true,
 	})
 
 	Register(platformAccounts, doc, groupPath, "DELETE", "/:account_id/roles/:role_id", h.RemoveRole, RouteSpec{
@@ -146,5 +162,6 @@ func registerPlatformAccountRoutes(api fiber.Router, h *admin.AccountHandler, do
 		Tags:    []string{"平台账号"},
 		Input:   new(model.RemoveRoleParams),
 		Output:  nil,
+		Auth:    true,
 	})
 }