fix: 修复多项后端缺陷并加固安全与限流

- 修正 AI 会话表初始化及异步数据库 URI 处理
- 新增全局 API 与 WS 聊天限流，健康检查豁免
- 修复忘记密码接口防用户枚举与参数校验
- 修复 SSE 推送数据重复编码问题
- 修复 Cron 表达式 Quartz 问号兼容
- 修复存储模块权限标识前缀
- 新增过期日志清理与任务错误中文提示

backend/app/modules/system/user/controller.py

@@ -71,15 +71,14 @@ async def reset_password_controller(
     return SuccessResponse(data=result_dict, msg="重置密码成功")
 
 
-@UserRouter.post("/password/forget", summary="忘记密码", response_model=ResponseSchema[UserOutSchema])
+@UserRouter.post("/password/forget", summary="忘记密码", response_model=ResponseSchema[None])
 async def forget_password_controller(
     db: Annotated[AsyncSession, Depends(db_getter)],
     data: Annotated[UserForgetPasswordSchema, Body(description="忘记密码参数")],
 ) -> JSONResponse:
     auth = AuthSchema()
-    user_forget_password_result: UserOutSchema = await UserService(auth, db).forget_password(data=data)
-    logger.info(f"{data.username} 重置密码成功")
-    return SuccessResponse(data=user_forget_password_result, msg="重置密码成功")
+    await UserService(auth, db).forget_password(data=data)
+    return SuccessResponse(msg="如果该账号存在，请联系管理员重置密码")
 
 
 @UserRouter.post("/register", summary="用户注册", response_model=ResponseSchema[UserOutSchema])