限制初始密码强制范围并修复后台图片加载

backend/internal/router/router.go

@@ -315,7 +315,7 @@ func New(cfg config.Config, deps Dependencies, logger *zap.Logger) *gin.Engine {
 	var validateAdminToken middleware.AdminTokenValidatorFunc
 	if adminAuthRepo != nil {
 		validateAdminToken = func(ctx context.Context, adminID uint64, tokenVersion int64) (middleware.AdminTokenContext, error) {
-			admin, err := adminAuthRepo.FindActiveForToken(ctx, adminID, tokenVersion)
+			admin, err := adminAuthRepo.FindActiveForPasswordGate(ctx, adminID, tokenVersion)
 			if err != nil {
 				return middleware.AdminTokenContext{}, err
 			}