删除钱包充值功能并消除重复入账风险

钱包充值为开发态测试功能(生产环境本就禁用),且支付回调存在重复入账风险:入账与标记 paid 两步非原子、wallet_ledger 去重无唯一索引、幂等键使用了可变的 ProviderOrderID。直接删除该功能从根本上消除风险。

后端:
- payment 移除 StartWalletRecharge/QueryWalletRecharge 及相关 handler/DTO/常量;confirmPaid 增加 OrderID 守卫;解除对 wallet 仓库的依赖
- wallet 移除 Recharge/ConfirmRechargeFromChannel 及相关定义
- 移除三条充值路由;adminfinance 财务统计口径只统计 order_pay
- 清理充值相关测试用例

前端:
- 移除充值 API、WalletView 充值面板/弹窗、admin 充值标签与筛选
- 保留钱包余额、流水、提现等核心能力

go build/vet 与 vue-tsc typecheck 均通过。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

backend/internal/modules/payment/handler.go

@@ -63,43 +63,6 @@ func (h *Handler) Query(c *gin.Context) {
 	response.OK(c, item)
 }
 
-func (h *Handler) WalletRecharge(c *gin.Context) {
-	userID, ok := currentUserID(c)
-	if !ok {
-		response.Unauthorized(c, "缺少用户上下文")
-		return
-	}
-	var req WalletRechargePaymentRequest
-	if err := c.ShouldBindJSON(&req); err != nil {
-		response.BadRequest(c, "充值金额不正确")
-		return
-	}
-	item, err := h.service.StartWalletRecharge(c.Request.Context(), userID, req, c.ClientIP())
-	if err != nil {
-		writePaymentError(c, err)
-		return
-	}
-	response.OK(c, item)
-}
-
-func (h *Handler) WalletRechargeQuery(c *gin.Context) {
-	userID, ok := currentUserID(c)
-	if !ok {
-		response.Unauthorized(c, "缺少用户上下文")
-		return
-	}
-	paymentID, ok := parseID(c)
-	if !ok {
-		return
-	}
-	item, err := h.service.QueryWalletRecharge(c.Request.Context(), userID, paymentID)
-	if err != nil {
-		writePaymentError(c, err)
-		return
-	}
-	response.OK(c, item)
-}
-
 func (h *Handler) QueryRefundStatus(c *gin.Context) {
 	orderID, ok := parseID(c)
 	if !ok {
@@ -248,8 +211,6 @@ func writePaymentError(c *gin.Context, err error) {
 		response.Error(c, http.StatusConflict, "payment_cannot_start", "当前订单不能支付")
 	case errors.Is(err, ErrRefundCannotStart):
 		response.Error(c, http.StatusConflict, "refund_cannot_start", "当前订单不能退款")
-	case errors.Is(err, ErrWalletRechargeDisabled):
-		response.Error(c, http.StatusGone, "wallet_recharge_disabled", "钱包充值已关闭")
 	case errors.Is(err, ErrPaymentVerifyFailed):
 		response.Error(c, http.StatusForbidden, "payment_verify_failed", "支付通知验签失败")
 	case errors.Is(err, ErrPaymentNotFound), errors.Is(err, gorm.ErrRecordNotFound), order.IsNotFound(err):