refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

* refactor(auth): replace dashboard sessions with stateless tokens

* feat(auth): harden session issuance and distributed enforcement

* fix(proxy): preserve trusted proxy compatibility defaults

* refactor: address dashboard auth review feedback

* refactor: remove classic frontend and flatten web app

middleware/audit.go

@@ -93,7 +93,7 @@ var auditRouteActions = map[string]string{
 	"POST /api/subscription/admin/bind":     "subscription.bind",
 
 	// 日志
-	"DELETE /api/log/": "log.clear",
+	"POST /api/system-task/log-cleanup": "log.cleanup_start",
 }
 
 // beginAdminAudit 在管理/root 写操作进入 handler 前包装 ResponseWriter，
@@ -155,7 +155,7 @@ func finishAdminAudit(c *gin.Context, writer *auditResponseWriter) {
 		opParams["route"] = route
 	}
 
-	// content 为英文兜底文本（导出/经典前端用）。
+	// content 为英文兜底文本（供导出等非本地化消费者使用）。
 	content := method + " " + route
 
 	adminInfo := map[string]interface{}{