feat(douyu): 新增和平小店查询模块(绑定角色/商品列表/点券余额)

- activity_client: getIframeUrl 签发 code/sig,道聚城 getrole.out/recommend/balance 接口
  (2026-08 起需 isCode=1 + authType=delegate + sAnchorId 才能通过 Livelink 校验)
- 迁移 0016: accounts xpd_* 字段、douyu_config 小店配置(actAlias/actId/rid)、
  douyu_xpd_goods_snapshot 商品快照表
- runner/service/router/schema 注册 query_xpd_role/refresh_xpd_goods/query_xpd_balance
  三个任务,任务结果剥离 role.raw 防 openid 泄露
- 前端: 和平小店路由/菜单/DouyuTasksPage 三态/商品下拉/配置弹窗

web/backend/routers/douyu.py

@@ -12,7 +12,7 @@ from sqlalchemy.orm import Session, joinedload
 
 from ..database import SessionLocal, get_db
 from ..deps import authenticate_websocket, get_current_user, require_permission
-from ..models import Account, DouyuConfig, DouyuEsportsGoodsSnapshot, DouyuGoodsSnapshot, DouyuTask, User
+from ..models import Account, DouyuConfig, DouyuEsportsGoodsSnapshot, DouyuGoodsSnapshot, DouyuTask, DouyuXpdGoodsSnapshot, User
 from ..permissions import user_has_permission
 from ..schemas import (
     DouyuConfigOut,
@@ -21,6 +21,7 @@ from ..schemas import (
     DouyuTaskAccountOut,
     DouyuTaskBatchRequest,
     DouyuTaskOut,
+    DouyuXpdGoodsOut,
 )
 from ..services.douyu_runner import DouyuBatchRunner, douyu_batch_registry
 from ..services.douyu_service import (
@@ -113,6 +114,13 @@ def _account_out(account: Account) -> DouyuTaskAccountOut:
         esports_bind_status=account.esports_bind_status or "",
         esports_change_role_wait_time=account.esports_change_role_wait_time,
         esports_can_change_time=account.esports_can_change_time,
+        xpd_game_name=account.xpd_game_name or "",
+        xpd_openid=account.xpd_openid or "",
+        xpd_role_id=account.xpd_role_id or "",
+        xpd_plat_id=account.xpd_plat_id,
+        xpd_area_id=account.xpd_area_id,
+        xpd_balance=account.xpd_balance,
+        xpd_bind_status=account.xpd_bind_status or "",
         assigned_to=account.assigned_to,
         assigned_username=account.assigned_user.username if account.assigned_user else None,
     )
@@ -168,6 +176,11 @@ def _sanitize_task_result(result: dict | None, task_type: str, *, include_detail
     ):
         data.pop(key, None)
 
+    # 和平小店任务 result 内嵌 role（含 gameOpenId 等），列表接口剥离其原始快照
+    role = data.get("role")
+    if isinstance(role, dict):
+        data["role"] = {key: value for key, value in role.items() if key != "raw"}
+
     goods = data.get("goods")
     if isinstance(goods, list):
         data.pop("goods", None)
@@ -223,6 +236,9 @@ def _config_out(config: DouyuConfig) -> DouyuConfigOut:
         esports_chicken_skin_id=douyu_config_value("esports_chicken_skin_id", config.esports_chicken_skin_id),
         esports_firework_gift_id=douyu_config_value("esports_firework_gift_id", config.esports_firework_gift_id),
         esports_firework_skin_id=douyu_config_value("esports_firework_skin_id", config.esports_firework_skin_id),
+        xpd_act_alias=douyu_config_value("xpd_act_alias", config.xpd_act_alias),
+        xpd_act_id=douyu_config_value("xpd_act_id", config.xpd_act_id),
+        xpd_rid=douyu_config_value("xpd_rid", config.xpd_rid),
         gold_pay_type=douyu_config_value("gold_pay_type", config.gold_pay_type),
         gift_id=douyu_config_value("gift_id", config.gift_id),
         skin_id=douyu_config_value("skin_id", config.skin_id),
@@ -267,6 +283,7 @@ def list_task_accounts(
             Account.tag.ilike(pattern),
             Account.game_name.ilike(pattern),
             Account.esports_game_name.ilike(pattern),
+            Account.xpd_game_name.ilike(pattern),
         ))
     total = None
     if page is not None:
@@ -331,6 +348,16 @@ def list_esports_goods(
     return rows
 
 
+@router.get("/xpd-goods", response_model=list[DouyuXpdGoodsOut])
+def list_xpd_goods(
+    db: Session = Depends(get_db),
+    current: User = Depends(require_permission("douyu:task")),
+):
+    """查看已缓存的和平小店商品。"""
+    rows = db.query(DouyuXpdGoodsSnapshot).order_by(DouyuXpdGoodsSnapshot.id.asc()).all()
+    return rows
+
+
 @router.post("/tasks/batch")
 async def create_task_batch(
     req: DouyuTaskBatchRequest,