feat: 新增全局操作密码功能，将线下充值验证从登录密码改为统一操作密码

- 新增 RedisSystemOperationPasswordKey 常量函数（pkg/constants/redis.go）
- 新增 operation_password Service（Set/IsSet/Verify，bcrypt 哈希存 Redis）
- 新增 SuperAdminHandler 及两个接口：
  - POST /api/admin/super-admin/operation-password（设置/重置，仅超级管理员）
  - GET /api/admin/super-admin/operation-password/status（查询是否已设置）
- AgentRecharge.OfflinePay 操作密码验证从"查当前用户登录密码"改为"全局操作密码 Verify"
- Bootstrap/路由/文档生成器同步注册

internal/bootstrap/handlers.go

@@ -133,5 +133,6 @@ func initHandlers(svc *services, deps *Dependencies) *Handlers {
 		AgentRecharge: admin.NewAgentRechargeHandler(svc.AgentRecharge, validate),
 		Refund:        admin.NewRefundHandler(svc.Refund),
 		ClientWechat:  app.NewClientWechatHandler(svc.WechatConfig, deps.Redis, deps.Logger),
+		SuperAdmin:    admin.NewSuperAdminHandler(svc.OperationPassword),
 	}
 }

internal/bootstrap/services.go

@@ -41,6 +41,7 @@ import (
 	shopSvc "github.com/break/junhong_cmp_fiber/internal/service/shop"
 
 	agentRechargeSvc "github.com/break/junhong_cmp_fiber/internal/service/agent_recharge"
+	operationPasswordSvc "github.com/break/junhong_cmp_fiber/internal/service/operation_password"
 	pollingSvc "github.com/break/junhong_cmp_fiber/internal/service/polling"
 	refundSvc "github.com/break/junhong_cmp_fiber/internal/service/refund"
 	shopCommissionSvc "github.com/break/junhong_cmp_fiber/internal/service/shop_commission"
@@ -101,6 +102,7 @@ type services struct {
 	PackageActivation           *packageSvc.ActivationService
 	Refund                      *refundSvc.Service
 	TrafficQuery                *trafficSvc.QueryService
+	OperationPassword           *operationPasswordSvc.Service
 }
 
 func initServices(s *stores, deps *Dependencies) *services {
@@ -140,6 +142,7 @@ func initServices(s *stores, deps *Dependencies) *services {
 
 	stopResumeService := iotCardSvc.NewStopResumeService(deps.Redis, s.IotCard, s.PackageUsage, s.DeviceSimBinding, deps.GatewayClient, deps.Logger)
 	device := deviceSvc.New(deps.DB, deps.Redis, s.Device, s.DeviceSimBinding, s.IotCard, s.Shop, s.AssetAllocationRecord, s.ShopPackageAllocation, s.ShopSeriesAllocation, s.PackageSeries, deps.GatewayClient, s.AssetIdentifier)
+	operationPassword := operationPasswordSvc.New(deps.Redis)
 
 	return &services{
 		Account:          account,
@@ -223,14 +226,15 @@ func initServices(s *stores, deps *Dependencies) *services {
 			s.AgentWallet,
 			s.AgentWalletTransaction,
 			s.Shop,
-			s.Account,
 			wechatConfig,
 			accountAudit,
+			operationPassword,
 			deps.Redis,
 			deps.Logger,
 		),
 		PackageActivation: packageActivation,
 		TrafficQuery:      trafficSvc.NewQueryService(deps.Redis, s.CardDailyUsage),
+		OperationPassword: operationPassword,
 		Refund: refundSvc.New(
 			deps.DB,
 			s.RefundRequest,

internal/bootstrap/types.go

@@ -62,6 +62,7 @@ type Handlers struct {
 	AgentRecharge               *admin.AgentRechargeHandler
 	Refund                      *admin.RefundHandler
 	ClientWechat                *app.ClientWechatHandler
+	SuperAdmin                  *admin.SuperAdminHandler
 }
 
 // Middlewares 封装所有中间件