修复鉴权：401拦截器加refresh重试 + admin refresh接口 + 路由守卫完善

根因：access_token每2小时过期，前端收到401直接清token跳登录，没有用refresh_token续期

后端修复：
- adminauth模块新增 POST /admin/auth/refresh 接口
- Service 注入 JWTManager，支持 admin refresh token 换新 token pair
- Refresh 方法验证 subjectType=admin + tokenType=refresh

前端修复：
- 401 拦截器核心改造：收到401先调 refresh 接口续期
- 加 isRefreshing 锁 + pendingRequests 队列防止并发刷新
- refresh 用原生 axios.post 避免拦截器递归
- 成功则更新 localStorage + 重试原请求，失败才清 token 跳登录
- 排除 /auth/refresh 自身避免死循环
- 支持 /admin/ 请求独立 token 管理
- auth.ts/adminAuth.ts 新增手动 refreshUserToken/refreshAdminSession
- 路由守卫给所有需登录路由添加 meta.requiresAuth
- 守卫同时支持 PC 端 /login 和移动端 /m/login

backend/internal/modules/wallet/repository.go

@@ -45,24 +45,24 @@ func (r *Repository) Account(userID uint64) (*AccountDTO, error) {
 	return toAccountDTO(account), nil
 }
 
-func (r *Repository) Ledger(userID uint64) ([]LedgerDTO, error) {
+func (r *Repository) Ledger(userID uint64, page, pageSize int) (*PaginatedResult, error) {
+	var total int64
+	if err := r.db.Model(&model.WalletLedger{}).Where("user_id = ?", userID).Count(&total).Error; err != nil {
+		return nil, err
+	}
+	offset := (page - 1) * pageSize
 	var rows []model.WalletLedger
-	if err := r.db.Where("user_id = ?", userID).Order("id DESC").Limit(100).Find(&rows).Error; err != nil {
+	if err := r.db.Where("user_id = ?", userID).Order("id DESC").Offset(offset).Limit(pageSize).Find(&rows).Error; err != nil {
 		return nil, err
 	}
 	items := make([]LedgerDTO, 0, len(rows))
 	for _, row := range rows {
 		items = append(items, toLedgerDTO(row))
 	}
-	return items, nil
+	return &PaginatedResult{Items: items, Total: total, Page: page, PageSize: pageSize}, nil
 }
 
-func (r *Repository) AdminLedger(query AdminLedgerQuery) ([]AdminLedgerDTO, error) {
-	limit := query.Limit
-	if limit <= 0 || limit > 500 {
-		limit = 200
-	}
-
+func (r *Repository) AdminLedger(query AdminLedgerQuery) (*PaginatedResult, error) {
 	db := r.db.Table("wallet_ledger AS wl").
 		Select(`wl.id, wl.ledger_no, wl.user_id, COALESCE(u.phone, '') AS user_phone,
 			COALESCE(u.nickname, '') AS user_nickname, wl.order_id, COALESCE(ro.order_no, '') AS order_no,
@@ -71,21 +71,31 @@ func (r *Repository) AdminLedger(query AdminLedgerQuery) ([]AdminLedgerDTO, erro
 		Joins("LEFT JOIN users AS u ON u.id = wl.user_id").
 		Joins("LEFT JOIN rental_orders AS ro ON ro.id = wl.order_id")
 
+	countDB := r.db.Model(&model.WalletLedger{})
 	if query.UserID > 0 {
 		db = db.Where("wl.user_id = ?", query.UserID)
+		countDB = countDB.Where("user_id = ?", query.UserID)
 	}
 	if query.OrderID > 0 {
 		db = db.Where("wl.order_id = ?", query.OrderID)
+		countDB = countDB.Where("order_id = ?", query.OrderID)
 	}
 	if query.BizType != "" {
 		db = db.Where("wl.biz_type = ?", query.BizType)
+		countDB = countDB.Where("biz_type = ?", query.BizType)
 	}
 
-	var items []AdminLedgerDTO
-	if err := db.Order("wl.id DESC").Limit(limit).Scan(&items).Error; err != nil {
+	var total int64
+	if err := countDB.Count(&total).Error; err != nil {
 		return nil, err
 	}
-	return items, nil
+
+	offset := (query.Page - 1) * query.PageSize
+	var items []AdminLedgerDTO
+	if err := db.Order("wl.id DESC").Offset(offset).Limit(query.PageSize).Scan(&items).Error; err != nil {
+		return nil, err
+	}
+	return &PaginatedResult{Items: items, Total: total, Page: query.Page, PageSize: query.PageSize}, nil
 }
 
 func AppendEntries(tx *gorm.DB, entries ...Entry) error {