feat(framework): 回灌 OpenFlare 分层、安全与运行时改进

将平台域持久化收敛为 repository 唯一入口，model 去掉 IO。
邮件头写入前清除 CR/LF，防止 header 注入。
httppool 支持可配置 Transport；batchwriter 增加 MinBatchSize/Stats，flush 失败交回批次；任务 PermanentError 作为 SkipRetry 终态。
设置与推送页的确认改为 AlertDialog；axios 去尾斜杠并按 Gin 数组序列化查询参数。
升级共享 Go 依赖（Gin、Asynq、OTel、GORM、Redis 等）。

pkg/httppool/httppool.go

@@ -5,9 +5,11 @@
 package httppool
 
 import (
+	"context"
 	"crypto/tls"
 	"net"
 	"net/http"
+	"net/url"
 	"sync"
 	"time"
 
@@ -30,28 +32,66 @@ var (
 	once             sync.Once
 )
 
+// TransportOptions configures the request-specific parts of a pooled HTTP
+// transport. Pool sizes and timeout defaults remain managed by this package.
+// A nil Proxy explicitly disables proxy use.
+type TransportOptions struct {
+	Proxy                 func(*http.Request) (*url.URL, error)
+	DialContext           func(context.Context, string, string) (net.Conn, error)
+	TLSClientConfig       *tls.Config
+	ResponseHeaderTimeout time.Duration
+	TraceFilter           func(*http.Request) bool
+}
+
+// NewTransport returns an independently configurable pooled transport wrapped
+// with OTel instrumentation. The supplied TLS configuration is cloned before
+// use so later caller mutations cannot change an active transport.
+func NewTransport(options TransportOptions) http.RoundTripper {
+	dialContext := options.DialContext
+	if dialContext == nil {
+		dialContext = (&net.Dialer{
+			Timeout:   dialTimeout,
+			KeepAlive: dialKeepAlive,
+		}).DialContext
+	}
+
+	tlsConfig := options.TLSClientConfig
+	if tlsConfig == nil {
+		tlsConfig = &tls.Config{}
+	} else {
+		tlsConfig = tlsConfig.Clone()
+	}
+	if tlsConfig.ClientSessionCache == nil {
+		tlsConfig.ClientSessionCache = tls.NewLRUClientSessionCache(tlsSessionCacheSize)
+	}
+
+	transport := &http.Transport{
+		Proxy:                 options.Proxy,
+		DialContext:           dialContext,
+		ForceAttemptHTTP2:     true,
+		MaxIdleConns:          maxIdleConns,
+		MaxIdleConnsPerHost:   maxIdleConnsPerHost,
+		IdleConnTimeout:       idleConnTimeout,
+		TLSHandshakeTimeout:   tlsHandshakeTimeout,
+		ResponseHeaderTimeout: options.ResponseHeaderTimeout,
+		ExpectContinueTimeout: expectContinueTimeout,
+		TLSClientConfig:       tlsConfig,
+	}
+	otelOptions := make([]otelhttp.Option, 0, 1)
+	if options.TraceFilter != nil {
+		otelOptions = append(otelOptions, otelhttp.WithFilter(options.TraceFilter))
+	}
+	return otelhttp.NewTransport(transport, otelOptions...)
+}
+
 // DefaultTransport returns a globally shared, optimized http.RoundTripper
 // with OTel instrumentation. It maintains a pool of idle TCP connections
 // across hosts.
 func DefaultTransport() http.RoundTripper {
 	once.Do(func() {
-		transport := &http.Transport{
+		defaultTransport = NewTransport(TransportOptions{
 			Proxy: http.ProxyFromEnvironment,
-			DialContext: (&net.Dialer{
-				Timeout:   dialTimeout,
-				KeepAlive: dialKeepAlive,
-			}).DialContext,
-			ForceAttemptHTTP2:     true,
-			MaxIdleConns:          maxIdleConns,
-			MaxIdleConnsPerHost:   maxIdleConnsPerHost,
-			IdleConnTimeout:       idleConnTimeout,
-			TLSHandshakeTimeout:   tlsHandshakeTimeout,
-			ExpectContinueTimeout: expectContinueTimeout,
-			TLSClientConfig: &tls.Config{
-				ClientSessionCache: tls.NewLRUClientSessionCache(tlsSessionCacheSize),
-			},
-		}
-		defaultTransport = otelhttp.NewTransport(transport)
+		})
 	})
 	return defaultTransport
 }