订单接口最小化与私有文件访问加固

- 订单列表使用独立最小 DTO 并分页，号主待办提供独立接口与统计
- 用户 token 增加版本控制，冻结/改密/退出即时撤销会话
- 移除 URL token 传参，SSE 与接口统一使用 HttpOnly Cookie
- 私有文件按上传归属与业务关联授权，收款凭证转私有访问并校验归属
- 公开商品接口返回最小字段，隐藏号主身份与内部状态
- 每日清理超过 30 天未关联业务的上传归属，上传归属失败时补偿删除对象

backend/internal/modules/order/presenter_test.go

@@ -1,6 +1,8 @@
 package order
 
 import (
+	"encoding/json"
+	"strings"
 	"testing"
 	"time"
 
@@ -39,3 +41,52 @@ func TestOrderDTOForUserHidesDepositHoldFields(t *testing.T) {
 		t.Fatalf("deposit hold released at = %v, want nil", dto.DepositHoldReleasedAt)
 	}
 }
+
+func TestUserOrderListItemDoesNotSerializeDetailFields(t *testing.T) {
+	row := orderRow{
+		RentalOrder: model.RentalOrder{
+			ID:                         1,
+			OrderNo:                    "ORD-001",
+			ListingID:                  2,
+			OwnerID:                    10,
+			RenterID:                   20,
+			RentAmountCent:             1000,
+			DepositAmountCent:          2000,
+			DepositHoldReason:          "风控复核",
+			DepositFreeManualQuotaCent: 5000,
+			Status:                     orderStatusPendingPayment,
+		},
+		ListingNo: "SP000002",
+		Title:     "测试账号",
+	}
+
+	raw, err := json.Marshal(row.toUserListItem(20, nil))
+	if err != nil {
+		t.Fatalf("Marshal() error = %v", err)
+	}
+	text := string(raw)
+	for _, field := range []string{"account_snapshot", "deposit_hold_reason", "deposit_free_manual_quota_cent", "owner_id", "renter_id"} {
+		if strings.Contains(text, field) {
+			t.Fatalf("list response contains sensitive field %q: %s", field, text)
+		}
+	}
+}
+
+func TestAdminOrderListItemMasksPhonesAndOmitsSnapshot(t *testing.T) {
+	row := orderRow{
+		RentalOrder: model.RentalOrder{ID: 1, OrderNo: "ORD-001", Status: orderStatusPendingPayment},
+		OwnerPhone:  "13800001234",
+		RenterPhone: "13900005678",
+	}
+	raw, err := json.Marshal(row.toAdminListItem())
+	if err != nil {
+		t.Fatalf("Marshal() error = %v", err)
+	}
+	text := string(raw)
+	if strings.Contains(text, "13800001234") || strings.Contains(text, "13900005678") {
+		t.Fatalf("list response contains full phone number: %s", text)
+	}
+	if strings.Contains(text, "account_snapshot") {
+		t.Fatalf("list response contains account snapshot: %s", text)
+	}
+}