feat(安全): 添加安全开关并完善测试流程

实现安全开关默认关闭与响应头透传逻辑
- URL 校验与响应头过滤支持开关并覆盖流式路径
- 非流式 Content-Type 透传/默认值按配置生效
- 接入 go test、golangci-lint 与前端 lint/typecheck
- 补充相关测试与配置/文档说明

frontend/src/stores/auth.ts

@@ -106,7 +106,7 @@ export const useAuthStore = defineStore('auth', () => {
       if (response.user.run_mode) {
         runMode.value = response.user.run_mode
       }
-      const { run_mode, ...userData } = response.user
+      const { run_mode: _run_mode, ...userData } = response.user
       user.value = userData
 
       // Persist to localStorage
@@ -141,7 +141,7 @@ export const useAuthStore = defineStore('auth', () => {
       if (response.user.run_mode) {
         runMode.value = response.user.run_mode
       }
-      const { run_mode, ...userDataWithoutRunMode } = response.user
+      const { run_mode: _run_mode, ...userDataWithoutRunMode } = response.user
       user.value = userDataWithoutRunMode
 
       // Persist to localStorage
@@ -187,7 +187,7 @@ export const useAuthStore = defineStore('auth', () => {
       if (response.data.run_mode) {
         runMode.value = response.data.run_mode
       }
-      const { run_mode, ...userData } = response.data
+      const { run_mode: _run_mode, ...userData } = response.data
       user.value = userData
 
       // Update localStorage