fix(file): 修复商品详情截图与提现打款凭证等私有图片 403 权限问题

- 放宽公开商品截图 key 提取规则，支持任意合规 object key 转换为免鉴权公开端点
- 补充后台截图上传 listing_screenshot 与 operating-expense 场景识别
- dependencies 授权器支持已审核上架商品截图兜底放行、提现人打款凭证鉴权及变体后缀匹配
- /api/files 路由组支持用户与管理员双重鉴权 (AuthUserOrAdmin)
- 前端收款账号凭证与提现详情凭证统一升级为 AuthImage 组件并支持大图预览

backend/internal/modules/file/service.go

@@ -118,8 +118,12 @@ func fileURLForScene(scene string, key string) string {
 func normalizeScene(scene string) string {
 	scene = strings.TrimSpace(strings.ToLower(scene))
 	switch scene {
-	case "listing", "handoff", "dispute", "realname", "avatar", "home-banner", "chat", "payment-cert", "announcement", "qrcode", "mohong", "crash", "aw-recycle", "cooperation-feedback", "manual-disbursement":
+	case "listing", "handoff", "dispute", "realname", "avatar", "home-banner", "chat", "payment-cert", "announcement", "qrcode", "mohong", "crash", "aw-recycle", "cooperation-feedback", "manual-disbursement", "operating-expense":
 		return scene
+	case "listing_screenshot", "listing-screenshot":
+		return "listing"
+	case "operating_expense":
+		return "operating-expense"
 	default:
 		return "misc"
 	}

backend/internal/modules/file/storage_test.go

@@ -76,3 +76,19 @@ func TestCooperationFeedbackSceneUsesPublicFileURL(t *testing.T) {
 		t.Fatalf("cooperation-feedback file url = %q, want public file endpoint", got)
 	}
 }
+
+func TestNormalizeSceneListingScreenshotAndOperatingExpense(t *testing.T) {
+	if got := normalizeScene("listing_screenshot"); got != "listing" {
+		t.Fatalf("normalize listing_screenshot scene = %q, want listing", got)
+	}
+	if got := normalizeScene("listing-screenshot"); got != "listing" {
+		t.Fatalf("normalize listing-screenshot scene = %q, want listing", got)
+	}
+	if got := normalizeScene("operating-expense"); got != "operating-expense" {
+		t.Fatalf("normalize operating-expense scene = %q, want operating-expense", got)
+	}
+	if got := normalizeScene("operating_expense"); got != "operating-expense" {
+		t.Fatalf("normalize operating_expense scene = %q, want operating-expense", got)
+	}
+}
+