perf(cache): 三层缓存框架补强

- 新增 cache-framework skill，规范 RAM→Redis→DB 读路径、失效与 pub/sub
- 上传元数据 Otter+Redis 缓存与多节点失效；Auth Source 缓存与 pub/sub
- ListSystemConfigsByKeys 补 Redis 层；上传统计单事务；登录/Token 缓存预热
- cleanup 任务补 upload meta 失效钩子

internal/apps/oauth/auth_source_resolver.go

@@ -25,16 +25,16 @@ func isOIDCLoginEnabled(ctx context.Context) bool {
 func resolveAuthSource(ctx context.Context, sourceName string) (*model.AuthSource, error) {
 	name := strings.TrimSpace(strings.ToLower(sourceName))
 	if name == "" {
-		sources, err := model.GetActiveAuthSources(ctx)
+		sources, err := repository.GetActiveAuthSourcesCached(ctx)
 		if err != nil {
 			return nil, err
 		}
 		if len(sources) == 0 {
 			return nil, errors.New(errNoActiveAuthSource)
 		}
-		return &sources[0], nil
+		return repository.GetAuthSourceByNameCached(ctx, sources[0].Name)
 	}
-	return model.GetAuthSourceByName(ctx, name)
+	return repository.GetAuthSourceByNameCached(ctx, name)
 }
 
 func activeLoginSources(ctx context.Context) []AuthSourceView {
@@ -43,7 +43,7 @@ func activeLoginSources(ctx context.Context) []AuthSourceView {
 		return nil
 	}
 
-	dbSources, err := model.GetActiveAuthSources(ctx)
+	dbSources, err := repository.GetActiveAuthSourcesCached(ctx)
 	if err != nil {
 		return nil
 	}