增加用户认证、等级、徽章与积分体系，并优化管理后台体验。

覆盖站长调账与积分解锁内容；后台按审核优先分组导航，仪表盘展示待办，用户管理改为成员目录式布局。

Co-authored-by: Cursor <cursoragent@cursor.com>

service/sanitize_html.go

@@ -17,16 +17,16 @@ func postContentHTMLPolicy() *bluemonday.Policy {
 		p := bluemonday.UGCPolicy()
 
 		// TipTap / Markdown 转换会用到的结构
-		p.AllowElements("div", "span", "u", "s", "center", "members-only", "reply-only")
+		p.AllowElements("div", "span", "u", "s", "center", "members-only", "reply-only", "points-only")
 		p.AllowAttrs("class").OnElements(
 			"p", "div", "span", "pre", "code", "img", "a",
 			"h1", "h2", "h3", "h4", "h5", "h6",
 			"blockquote", "ul", "ol", "li", "table", "thead", "tbody", "tr", "th", "td",
-			"members-only", "reply-only",
+			"members-only", "reply-only", "points-only",
 		)
 		p.AllowAttrs("colspan", "rowspan").OnElements("th", "td")
 		p.AllowAttrs(
-			"data-locked", "data-length", "data-gate",
+			"data-locked", "data-length", "data-gate", "data-cost", "data-block-key",
 			"data-code-copy", "data-code-fold", "data-lang", "data-full",
 			"data-code-style", "data-line-numbers", "data-collapsed",
 			"data-line-count", "data-lineno-digits",