refactor(util): move response helper to common/response and session logic to oauth

- Relocated generic HTTP response helpers (Response, OK, Err, etc.) from internal/util/ to a dedicated internal/common/response/ package.
- Renamed ResponseAny to Any to resolve revive stuttering warnings.
- Moved session building options and cookie headers logic from internal/util/ to internal/apps/oauth/.
- Removed all direct imports of Gin/Sessions/HTTP frameworks from internal/util/ to keep general utilities 100% pure.
- Regenerated Swagger API documentation via make swagger.
- All tests and make code-check compile and pass with 0 issues.

internal/util/response.go

@@ -1,33 +0,0 @@
-// Copyright 2025 linux.do
-// Copyright 2026 Arctel.net
-// SPDX-License-Identifier: Apache-2.0
-
-package util
-
-// Response 通用响应体
-type Response[T any] struct {
-	ErrorMsg string `json:"error_msg"`
-	Data     T      `json:"data"`
-}
-
-// ResponseAny 用于 Swagger 文档的响应类型（非泛型）
-// swag 不支持泛型，使用此类型替代 Response[T]
-type ResponseAny struct {
-	ErrorMsg string      `json:"error_msg" example:""`
-	Data     interface{} `json:"data"`
-}
-
-// OK 构造成功响应
-func OK[T any](data T) Response[T] {
-	return Response[T]{Data: data}
-}
-
-// OKNil 构造成功响应（data 为 null）
-func OKNil() Response[any] {
-	return Response[any]{Data: nil}
-}
-
-// Err 构造错误响应
-func Err(msg string) Response[any] {
-	return Response[any]{ErrorMsg: msg, Data: nil}
-}

internal/util/session.go

@@ -1,53 +0,0 @@
-// Copyright 2025 linux.do
-// Copyright 2026 Arctel.net
-// SPDX-License-Identifier: Apache-2.0
-
-package util
-
-import (
-	"net/http"
-	"strings"
-
-	"github.com/Rain-kl/Wavelet/internal/config"
-	"github.com/gin-contrib/sessions"
-)
-
-// GetSessionOptions 根据配置构建 Session 选项
-func GetSessionOptions(maxAge int) sessions.Options {
-	return sessions.Options{
-		Path:     "/",
-		Domain:   config.Config.App.SessionDomain,
-		MaxAge:   maxAge,
-		HttpOnly: config.Config.App.SessionHTTPOnly,
-		Secure:   config.Config.App.SessionSecure,
-		SameSite: http.SameSiteLaxMode,
-	}
-}
-
-// StripCookieMaxAgeAndExpires 从 Set-Cookie 响应头中移除 Max-Age 和 Expires，从而使其成为浏览器会话 Cookie
-func StripCookieMaxAgeAndExpires(header http.Header, cookieName string) {
-	headers := header["Set-Cookie"]
-	if len(headers) == 0 {
-		return
-	}
-
-	newHeaders := make([]string, 0, len(headers))
-	for _, h := range headers {
-		if strings.HasPrefix(h, cookieName+"=") {
-			parts := strings.Split(h, ";")
-			newParts := make([]string, 0, len(parts))
-			for _, p := range parts {
-				trimmed := strings.TrimSpace(p)
-				lower := strings.ToLower(trimmed)
-				if strings.HasPrefix(lower, "max-age=") || strings.HasPrefix(lower, "expires=") {
-					continue
-				}
-				newParts = append(newParts, p)
-			}
-			newHeaders = append(newHeaders, strings.Join(newParts, ";"))
-		} else {
-			newHeaders = append(newHeaders, h)
-		}
-	}
-	header["Set-Cookie"] = newHeaders
-}