后端生成闸+多项修复;前端全站更新;QA 审计与报告

后端:
- 新增 celery_health 生成前置闸——无 worker 在线时图片/视频生成入口
  一律 503,防"提交到 ARK 后无人轮询、结果悬空+额度冻结"的数据丢失
- 拼接导出:帧率跟随源众数、字幕逐句重映射、原声/BGM 混音修复
- 资金核算审计脚本 + genesis 账目回填 + 滞留预留清理命令
- 接入 yunqi provider 与豆包 TTS 模型(catalog/migrations/bootstrap 命令)

前端:全站页面更新(pipeline/library/products/projects/team/account 等),
新增共享 pager 分页组件

QA:刷新 function-audit 全量输出,新增 full-qa 报告
文档:BP 产品介绍资料、design/CLAUDE.md

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

core/backend/apps/billing/views.py

@@ -11,7 +11,7 @@ from rest_framework.permissions import IsAuthenticated
 from rest_framework.response import Response
 
 from apps.ai.models import AITask
-from apps.common.api import get_current_team
+from apps.common.api import can_manage_team, get_current_team
 
 from .models import CreditAccount, CreditLedger
 from .serializers import CreditAccountSerializer, CreditLedgerSerializer
@@ -83,6 +83,9 @@ def ledgers(request):
 @permission_classes([IsAuthenticated])
 def recharge(request):
     team = get_current_team(request.user)
+    # 充值是团队资金操作:仅 owner/admin 可发起,普通成员/访客一律拒绝
+    if not can_manage_team(request.user, team):
+        return Response({"detail": "permission denied"}, status=status.HTTP_403_FORBIDDEN)
     try:
         amount = Decimal(str(request.data.get("amount", "0")))
         bonus = Decimal(str(request.data.get("bonus", "0")))