feat: add admin web updates and verified username changes

Add isolated update jobs with database backups, progress logs and application rollback. Remove default account hints and prevent default admin recreation after renaming.

Enforce customer and order search scopes, secure session cookies, fix quotation rounding and amount wording, and update backend dependencies. Add API and deployment regression coverage.

backend/routes/logs.js

@@ -23,7 +23,7 @@ const router = express.Router();
  * 不会丢记录 —— 宁可直接显示，也不要因为漏配而看不见。
  * ------------------------------------------------------------------------- */
 const CATEGORIES = [
-  { key: 'auth', label: '认证', match: /^(login|logout|password_|profile_)/ },
+  { key: 'auth', label: '认证', match: /^(login|logout|password_|profile_|username_)/ },
   { key: 'user', label: '用户', match: /^user_/ },
   { key: 'permission', label: '权限', match: /^permission_group_/ },
   { key: 'org', label: '组织', match: /^(organization_|branding_)/ },
@@ -43,6 +43,9 @@ const ACTION_LABELS = {
   profile_update: '更新个人资料',
   password_change: '修改密码',
   password_change_failed: '修改密码失败',
+  password_verify_failed: '身份密码验证失败',
+  username_change: '修改用户名',
+  system_update: '启动系统更新',
   user_create: '新建用户',
   user_update: '更新用户',
   permission_group_create: '新建权限组',