feat: add configurable payments and Gitea staging delivery

Add database-backed administrators, configurable Alipay packages, idempotent payment settlement and platform reporting. Standardize Gitea workflows on the xiaoxin runner so reviewed staging commits are tested, packaged, and deployed by immutable image digest.

frontend/src/app/api/admin/codes/route.ts

@@ -2,7 +2,7 @@ import { NextResponse } from "next/server";
 import { z } from "zod";
 import {
   createAdminSupabaseClient,
-  isAdminEmail,
+  isAdminUser,
 } from "@/lib/supabase/admin";
 import {
   generateRedeemCode,
@@ -11,7 +11,6 @@ import {
 } from "@/lib/supabase/codes";
 import {
   isSupabaseConfigurationError,
-  SupabaseConfigurationError,
 } from "@/lib/supabase/config";
 import { createServerSupabaseClient } from "@/lib/supabase/server";
 
@@ -25,14 +24,10 @@ const createCodesSchema = z.object({
 });
 
 async function requireAdmin() {
-  if (!process.env.ADMIN_EMAILS?.trim()) {
-    throw new SupabaseConfigurationError(["ADMIN_EMAILS"]);
-  }
-
   const supabase = await createServerSupabaseClient();
   const { data: { user }, error } = await supabase.auth.getUser();
   if (error || !user) return { response: NextResponse.json({ error: "请先登录" }, { status: 401 }) };
-  if (!isAdminEmail(user.email)) {
+  if (!(await isAdminUser(user))) {
     return { response: NextResponse.json({ error: "无管理员权限" }, { status: 403 }) };
   }
   return { user };