移除旧版 HTML 模板与兼容层，并完善私信、举报、媒体存储与 SEO。

Co-authored-by: Cursor <cursoragent@cursor.com>

middleware/auth.go

@@ -101,12 +101,11 @@ func extractToken(c *gin.Context) string {
 	if token, err := c.Cookie(CookieName); err == nil {
 		return token
 	}
-	return c.Query("token")
+	return ""
 }
 
 func isAPI(c *gin.Context) bool {
-	p := c.Request.URL.Path
-	return strings.HasPrefix(p, "/api/") || strings.HasPrefix(p, "/admin/api/")
+	return strings.HasPrefix(c.Request.URL.Path, "/api/")
 }
 
 func adminLoginPath(c *gin.Context) string {