fix(withdrawal): 修复提现详情收款二维码使用公网URL导致鉴权失败加载错误

- backend: withdrawal presenter 增加 privateCertificateURLs 兼容转换历史公网 payment-cert 路径
- frontend: AuthImage 与 fetchFileBlobByURL 兼容私有凭证 key，后台上下文通过管理员私有对象接口安全加载
- frontend: 按对象接口路径与 key 前缀精确判定，避免外链带 ?key= 被误代理到后台私有对象接口
- tests: 补充 TestPrivateCertificateURLs 单元测试

backend/internal/modules/withdrawal/presenter.go

@@ -3,6 +3,8 @@ package withdrawal
 import (
 	"context"
 	"encoding/json"
+	"net/url"
+	"strings"
 
 	"hfb_sys/backend/internal/model"
 )
@@ -72,6 +74,7 @@ func (r *Repository) toDetailDTO(ctx context.Context, w model.WithdrawalRequest)
 			if paymentAccount.CertificateURLs != nil {
 				json.Unmarshal(paymentAccount.CertificateURLs, &certificateURLs)
 			}
+			certificateURLs = privateCertificateURLs(certificateURLs)
 		}
 	}
 
@@ -118,4 +121,18 @@ func (r *Repository) toDetailDTO(ctx context.Context, w model.WithdrawalRequest)
 	}, nil
 }
 
-// 生成提现单号
+// privateCertificateURLs 兼容历史公开收款凭证 URL，统一经私有对象接口读取。
+func privateCertificateURLs(values []string) []string {
+	for index, value := range values {
+		parsed, err := url.Parse(value)
+		if err != nil || parsed.Path != "/api/public/files/object" {
+			continue
+		}
+		if !strings.HasPrefix(parsed.Query().Get("key"), "payment-cert/") {
+			continue
+		}
+		parsed.Path = "/api/files/object"
+		values[index] = parsed.String()
+	}
+	return values
+}