feat: 新增全局操作密码功能，将线下充值验证从登录密码改为统一操作密码

- 新增 RedisSystemOperationPasswordKey 常量函数（pkg/constants/redis.go）
- 新增 operation_password Service（Set/IsSet/Verify，bcrypt 哈希存 Redis）
- 新增 SuperAdminHandler 及两个接口：
  - POST /api/admin/super-admin/operation-password（设置/重置，仅超级管理员）
  - GET /api/admin/super-admin/operation-password/status（查询是否已设置）
- AgentRecharge.OfflinePay 操作密码验证从"查当前用户登录密码"改为"全局操作密码 Verify"
- Bootstrap/路由/文档生成器同步注册

internal/service/agent_recharge/service.go

@@ -11,7 +11,6 @@ import (
 
 	"github.com/redis/go-redis/v9"
 	"go.uber.org/zap"
-	"golang.org/x/crypto/bcrypt"
 	"gorm.io/gorm"
 
 	"github.com/break/junhong_cmp_fiber/internal/model"
@@ -27,6 +26,11 @@ type AuditServiceInterface interface {
 	LogOperation(ctx context.Context, log *model.AccountOperationLog)
 }
 
+// OperationPasswordServiceInterface 全局操作密码服务接口
+type OperationPasswordServiceInterface interface {
+	Verify(ctx context.Context, inputPassword string) error
+}
+
 // WechatConfigServiceInterface 支付配置服务接口
 type WechatConfigServiceInterface interface {
 	GetActiveConfig(ctx context.Context) (*model.WechatConfig, error)
@@ -35,16 +39,16 @@ type WechatConfigServiceInterface interface {
 // Service 代理预充值业务服务
 // 负责代理钱包充值订单的创建、线下确认、回调处理等业务逻辑
 type Service struct {
-	db                  *gorm.DB
-	agentRechargeStore  *postgres.AgentRechargeStore
-	agentWalletStore    *postgres.AgentWalletStore
-	agentWalletTxStore  *postgres.AgentWalletTransactionStore
-	shopStore           *postgres.ShopStore
-	accountStore        *postgres.AccountStore
-	wechatConfigService WechatConfigServiceInterface
-	auditService        AuditServiceInterface
-	redis               *redis.Client
-	logger              *zap.Logger
+	db                       *gorm.DB
+	agentRechargeStore       *postgres.AgentRechargeStore
+	agentWalletStore         *postgres.AgentWalletStore
+	agentWalletTxStore       *postgres.AgentWalletTransactionStore
+	shopStore                *postgres.ShopStore
+	wechatConfigService      WechatConfigServiceInterface
+	auditService             AuditServiceInterface
+	operationPasswordService OperationPasswordServiceInterface
+	redis                    *redis.Client
+	logger                   *zap.Logger
 }
 
 // New 创建代理预充值服务实例
@@ -54,23 +58,23 @@ func New(
 	agentWalletStore *postgres.AgentWalletStore,
 	agentWalletTxStore *postgres.AgentWalletTransactionStore,
 	shopStore *postgres.ShopStore,
-	accountStore *postgres.AccountStore,
 	wechatConfigService WechatConfigServiceInterface,
 	auditService AuditServiceInterface,
+	operationPasswordService OperationPasswordServiceInterface,
 	rdb *redis.Client,
 	logger *zap.Logger,
 ) *Service {
 	return &Service{
-		db:                  db,
-		agentRechargeStore:  agentRechargeStore,
-		agentWalletStore:    agentWalletStore,
-		agentWalletTxStore:  agentWalletTxStore,
-		shopStore:           shopStore,
-		accountStore:        accountStore,
-		wechatConfigService: wechatConfigService,
-		auditService:        auditService,
-		redis:               rdb,
-		logger:              logger,
+		db:                       db,
+		agentRechargeStore:       agentRechargeStore,
+		agentWalletStore:         agentWalletStore,
+		agentWalletTxStore:       agentWalletTxStore,
+		shopStore:                shopStore,
+		wechatConfigService:      wechatConfigService,
+		auditService:             auditService,
+		operationPasswordService: operationPasswordService,
+		redis:                    rdb,
+		logger:                   logger,
 	}
 }
 
@@ -175,13 +179,9 @@ func (s *Service) OfflinePay(ctx context.Context, id uint, req *dto.AgentOffline
 		return nil, errors.New(errors.CodeForbidden, "仅平台管理员可确认线下充值")
 	}
 
-	// 验证操作密码
-	account, err := s.accountStore.GetByID(ctx, userID)
-	if err != nil {
-		return nil, errors.Wrap(errors.CodeDatabaseError, err, "查询操作人账号失败")
-	}
-	if err := bcrypt.CompareHashAndPassword([]byte(account.Password), []byte(req.OperationPassword)); err != nil {
-		return nil, errors.New(errors.CodeInvalidParam, "操作密码错误")
+	// 验证全局操作密码
+	if err := s.operationPasswordService.Verify(ctx, req.OperationPassword); err != nil {
+		return nil, err
 	}
 
 	record, err := s.agentRechargeStore.GetByID(ctx, id)