feat(framework): 回灌 OpenFlare 分层、安全与运行时改进

将平台域持久化收敛为 repository 唯一入口，model 去掉 IO。
邮件头写入前清除 CR/LF，防止 header 注入。
httppool 支持可配置 Transport；batchwriter 增加 MinBatchSize/Stats，flush 失败交回批次；任务 PermanentError 作为 SkipRetry 终态。
设置与推送页的确认改为 AlertDialog；axios 去尾斜杠并按 Gin 数组序列化查询参数。
升级共享 Go 依赖（Gin、Asynq、OTel、GORM、Redis 等）。

internal/apps/upload/storage/migration.go

@@ -11,9 +11,8 @@ import (
 	"strings"
 
 	"github.com/Rain-kl/Wavelet/internal/infra/objectstore"
-	"github.com/Rain-kl/Wavelet/internal/infra/persistence"
 	"github.com/Rain-kl/Wavelet/internal/model"
-	"gorm.io/gorm"
+	"github.com/Rain-kl/Wavelet/internal/repository"
 )
 
 // StorageMigrationTask is the Asynq task name for storage migration.
@@ -21,18 +20,7 @@ const StorageMigrationTask = "storage:migrate"
 
 // LatestMigrationExecution returns the most recent storage migration task execution.
 func LatestMigrationExecution(ctx context.Context) (*model.TaskExecution, bool, error) {
-	var execution model.TaskExecution
-	err := db.DB(ctx).
-		Where("task_type = ?", StorageMigrationTask).
-		Order("id DESC").
-		First(&execution).Error
-	if err == nil {
-		return &execution, true, nil
-	}
-	if !errors.Is(err, gorm.ErrRecordNotFound) {
-		return nil, false, err
-	}
-	return nil, false, nil
+	return repository.GetLatestTaskExecutionByTaskType(ctx, StorageMigrationTask)
 }
 
 // ParseMigrationTargetConfig parses and validates a storage migration target payload.