feat: 管理后台认证加固——改密即失效旧令牌/账号锁定/登录审计/release随机初始密码

backend/router/router.go

@@ -136,7 +136,7 @@ func SetupRouter(db *gorm.DB, cfg *config.Config) *gin.Engine {
 		}
 
 		// ============ 需要认证的管理路由 ============
-		protected := api.Group("", middleware.AuthMiddleware(cfg))
+		protected := api.Group("", middleware.AuthMiddleware(cfg, db))
 		{
 			// 认证相关
 			register(protected, "GET", "/auth/me", authController.Me)