fix(organize): strip release tags/roman numerals/season markers; de-hardcode paths

feat(bot): button menu, capacity/open-reg quota, redemption codes, user mgmt,
account expiry + signin streak, device anti-sharing + inactivity cleanup,
one-click kick, self-service username/password

- Consolidate organize/rename defaults into Tools panel

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

internal/service/bot_settings.go

@@ -0,0 +1,103 @@
+package service
+
+import (
+	"context"
+	"strconv"
+
+	"github.com/ShukeBta/MediaStationGo/internal/repository"
+)
+
+// Bot / 设备管控相关的设置键。全部存储在 settings 表，可由管理员在 Bot 或
+// 系统设置页调整。带安全默认值：所有"自动删号"策略默认关闭。
+const (
+	// 开放注册（开注名额）。
+	SettingOpenRegEnabled = "telegram.openreg_enabled" // 是否开放注册
+	SettingOpenRegLimit   = "telegram.openreg_limit"   // 本轮开注名额上限（0=不限）
+	SettingOpenRegUsed    = "telegram.openreg_used"    // 本轮已用名额
+
+	// 防共享（警告制：并发播放 / 登录客户端 / 设备指纹）。
+	SettingAntiShareEnabled  = "device.antishare_enabled"   // 总开关（默认关）
+	SettingMaxConcurrentPlay = "device.max_concurrent_play" // 最大并发播放设备
+	SettingMaxLoggedClients  = "device.max_logged_clients"  // 最大同时登录客户端
+	SettingWarnThreshold     = "device.warn_threshold"      // 警告几次后删号
+	SettingPlayWindowSeconds = "device.play_window_seconds" // 并发播放判定窗口（秒）
+	SettingClientActiveDays  = "device.client_active_days"  // 登录设备活跃天数窗口
+
+	// 不活跃清理（独立开关）。
+	SettingInactiveEnabled   = "device.inactive_enabled"         // 总开关（默认关）
+	SettingInactiveMinHours  = "device.inactive_min_hours"       // 窗口内最低观看小时
+	SettingInactiveWindowMin = "device.inactive_window_days_min" // 随机窗口下限（天）
+	SettingInactiveWindowMax = "device.inactive_window_days_max" // 随机窗口上限（天）
+	SettingInactiveGraceDays = "device.inactive_grace_days"      // 新号宽限期（天）
+)
+
+// botConfig 是设备管控的已解析配置（含默认值）。
+type botConfig struct {
+	AntiShareEnabled  bool
+	MaxConcurrentPlay int
+	MaxLoggedClients  int
+	WarnThreshold     int
+	PlayWindowSeconds int
+	ClientActiveDays  int
+
+	InactiveEnabled   bool
+	InactiveMinHours  int
+	InactiveWindowMin int
+	InactiveWindowMax int
+	InactiveGraceDays int
+}
+
+// defaultBotConfig returns the safe defaults requested by the operator.
+func defaultBotConfig() botConfig {
+	return botConfig{
+		AntiShareEnabled:  false, // 自动删号默认关闭，需管理员显式开启
+		MaxConcurrentPlay: 3,
+		MaxLoggedClients:  3,
+		WarnThreshold:     2, // 两次警告后再犯删号
+		PlayWindowSeconds: 90,
+		ClientActiveDays:  30,
+
+		InactiveEnabled:   false, // 默认关闭
+		InactiveMinHours:  6,
+		InactiveWindowMin: 3,
+		InactiveWindowMax: 5,
+		InactiveGraceDays: 7,
+	}
+}
+
+// loadBotConfig reads the device-management configuration from settings,
+// falling back to safe defaults for any missing/invalid key.
+func loadBotConfig(ctx context.Context, repo *repository.Container) botConfig {
+	cfg := defaultBotConfig()
+	get := func(key string) string {
+		v, err := repo.Setting.Get(ctx, key)
+		if err != nil {
+			return ""
+		}
+		return v
+	}
+	cfg.AntiShareEnabled = parseBoolSetting(get(SettingAntiShareEnabled), cfg.AntiShareEnabled)
+	cfg.InactiveEnabled = parseBoolSetting(get(SettingInactiveEnabled), cfg.InactiveEnabled)
+	cfg.MaxConcurrentPlay = parseIntSettingDefault(get(SettingMaxConcurrentPlay), cfg.MaxConcurrentPlay)
+	cfg.MaxLoggedClients = parseIntSettingDefault(get(SettingMaxLoggedClients), cfg.MaxLoggedClients)
+	cfg.WarnThreshold = parseIntSettingDefault(get(SettingWarnThreshold), cfg.WarnThreshold)
+	cfg.PlayWindowSeconds = parseIntSettingDefault(get(SettingPlayWindowSeconds), cfg.PlayWindowSeconds)
+	cfg.ClientActiveDays = parseIntSettingDefault(get(SettingClientActiveDays), cfg.ClientActiveDays)
+	cfg.InactiveMinHours = parseIntSettingDefault(get(SettingInactiveMinHours), cfg.InactiveMinHours)
+	cfg.InactiveWindowMin = parseIntSettingDefault(get(SettingInactiveWindowMin), cfg.InactiveWindowMin)
+	cfg.InactiveWindowMax = parseIntSettingDefault(get(SettingInactiveWindowMax), cfg.InactiveWindowMax)
+	cfg.InactiveGraceDays = parseIntSettingDefault(get(SettingInactiveGraceDays), cfg.InactiveGraceDays)
+	if cfg.InactiveWindowMax < cfg.InactiveWindowMin {
+		cfg.InactiveWindowMax = cfg.InactiveWindowMin
+	}
+	return cfg
+}
+
+// parseIntSettingDefault parses an int setting, returning fallback on error.
+func parseIntSettingDefault(value string, fallback int) int {
+	n, err := strconv.Atoi(value)
+	if err != nil {
+		return fallback
+	}
+	return n
+}