fix(test-round): 测试清单一批 bug 修复 + 团队月限额持久化

后端:
- accounts: 团队级月限额持久化(Team.monthly_credit_limit 三态 + PATCH/GET
  /api/auth/team/settings/,刷新不丢,PMC#12);头像上传 500→502 可读错误;
  设备下线真失效(删并重建 token,旧 token 401)
- assets: 审核类目加 model_portrait,消除三视图"无需审核"误报
- ai/projects/products: 模特已有三视图复用、产品三视图同步回商品库
  (metadata.view=three_view)、真人模特三视图回写

前端:
- 商品图删除判断改用真实图片数;团队成员弹窗禁点外部关闭
- 图片预览骨架铺满占位;平台套图左侧栏折叠改导航同款;收件箱长文换行对齐
- 团队月限额改真落库(乐观更新+失败回滚)

测试:新增 TeamSettingsTests(5 条),accounts 全套 36 tests 通过;前端 build 0 error

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

core/frontend/src/api.ts

@@ -164,7 +164,8 @@ export const api = {
     return request<LoginSession[]>("/api/auth/me/sessions/");
   },
   revokeSession(id: string) {
-    return request<{ revoked: number }>(`/api/auth/me/sessions/${id}/revoke/`, { method: "POST" });
+    // 后端旋转 token 真正吊销被下线设备(单 token 体系),回传新 token 给当前设备保活
+    return request<{ revoked: number; token?: string }>(`/api/auth/me/sessions/${id}/revoke/`, { method: "POST" });
   },
   revokeOtherSessions() {
     return request<{ token: string }>("/api/auth/me/sessions/revoke-others/", { method: "POST" });
@@ -175,6 +176,10 @@ export const api = {
   teamMembers() {
     return request<TeamMember[]>("/api/auth/team/members/");
   },
+  // 团队级月限额持久化(超管在团队页设置 · PMC#12);monthly_credit_limit: 数值 / null(清空)
+  updateTeamSettings(payload: { monthly_credit_limit?: number | string | null }) {
+    return request<Team>("/api/auth/team/settings/", { method: "PATCH", body: JSON.stringify(payload) });
+  },
   createTeamMember(payload: {
     username: string;
     password: string;