feat: add WeChat Pay, Redis logging, storage tiers and personal albums

Replace virtual payments with WeChat Pay API v3 and verify callbacks and order polling. Cache WeChat access tokens in Redis and write structured Zap logs. Support configurable capacity plans across the API, admin and mini program, with purchase snapshots and quota enforcement. Allow personal albums before binding and share them with the current partner. Update deployment configuration and domain routing.

deploy/linux/past.service

@@ -1,19 +1,21 @@
 [Unit]
-Description=past-go backend service
-After=network.target mysql.service
-Wants=mysql.service
+Description=Past Go API
+After=network-online.target postgresql.service redis-server.service
+Wants=network-online.target
+Requires=postgresql.service redis-server.service
 
 [Service]
 Type=simple
-# 运行用户：宝塔默认站点用户为 www，需对该用户有 data_dir/uploads 写权限
 User=www
 Group=www
-# 改为你实际上传二进制与 config.yaml 的目录
-WorkingDirectory=/www/wwwroot/past
-ExecStart=/www/wwwroot/past/past-server -config /www/wwwroot/past/config.yaml
-Restart=always
+WorkingDirectory=/home/workspace
+ExecStart=/home/workspace/past-server -config /home/workspace/config.yaml
+Environment=TZ=Asia/Shanghai
+Restart=on-failure
 RestartSec=3
-# 标准输出/错误会进 journalctl；程序自身也会写 data/go-server.log
+UMask=0077
+NoNewPrivileges=true
+PrivateTmp=true
 StandardOutput=journal
 StandardError=journal