feat: 新增管理后台前端项目及安全加固

refactor(saas): 重构认证中间件与限流策略
- 登录限流调整为5次/分钟/IP
- 注册限流调整为3次/小时/IP
- GET请求不计入限流

fix(saas): 修复调度器时间戳处理
- 使用NOW()替代文本时间戳
- 兼容TEXT和TIMESTAMPTZ列类型

feat(saas): 实现环境变量插值
- 支持${ENV_VAR}语法解析
- 数据库密码支持环境变量注入

chore: 新增前端管理界面
- 基于React+Ant Design Pro
- 包含路由守卫/错误边界
- 对接58个API端点

docs: 更新安全加固文档
- 新增密钥管理规范
- 记录P0安全项审计结果
- 补充TLS终止说明

test: 完善配置解析单元测试
- 新增环境变量插值测试用例

tests/e2e/playwright.config.ts

@@ -5,16 +5,22 @@ import { defineConfig, devices } from '@playwright/test';
  *
  * Note: These tests focus on the React UI layer.
  * For full Tauri integration, use Tauri's built-in testing tools.
+ *
+ * Usage:
+ *   pnpm exec playwright test --config tests/e2e/playwright.config.ts
+ *   # Or if dev server already running:
+ *   pnpm exec playwright test --config tests/e2e/playwright.config.ts
  */
 export default defineConfig({
-  testDir: './tests/e2e',
+  testDir: '.',
   fullyParallel: true,
   forbidOnly: !!process.env.CI,
   retries: process.env.CI ? 2 : 0,
   workers: process.env.CI ? 1 : undefined,
   reporter: 'html',
   use: {
-    baseURL: 'http://localhost:5173',
+    // Tauri dev uses port 1420; plain Vite dev uses 5173
+    baseURL: process.env.E2E_BASE_URL || 'http://localhost:1420',
     trace: 'on-first-retry',
   },
   projects: [
@@ -25,8 +31,8 @@ export default defineConfig({
   ],
   webServer: {
     command: 'pnpm dev',
-    url: 'http://localhost:5173',
-    reuseExistingServer: !process.env.CI,
+    url: 'http://localhost:1420',
+    reuseExistingServer: true,
     timeout: 120000,
   },
 });