fix: address multiple code audit findings

- CORS: replace wildcard with explicit origin list from CORS_ORIGINS env
- Auth: enforce strong defaults, JWT blacklist (RevokedToken model), login rate limiting
- Auth: validate password length before bcrypt (72-byte limit)
- Scheduler: single-threaded worker to mitigate SQLite write contention
- Scheduler: graceful shutdown (wait=True)
- Snapshots: add prune_snapshots() with configurable retention count
- Storage: isolate localStorage keys via VITE_APP_KEY prefix
- Config: add cors_origins, login_rate_limit, snapshot_retention_count settings

frontend/src/components/AppLayout.vue

@@ -19,13 +19,6 @@
       <div class="sidebar-section">
         <div class="sidebar-section-title">监控中枢</div>
         <nav class="sidebar-nav">
-          <router-link to="/upstreams" class="nav-item" active-class="active" @click="closeMobileNav">
-            <span class="nav-icon"><el-icon><Connection /></el-icon></span>
-            <span class="nav-copy">
-              <strong>上游管理</strong>
-              <small>轮询、健康度、倍率快照</small>
-            </span>
-          </router-link>
           <router-link to="/websites" class="nav-item" active-class="active" @click="closeMobileNav">
             <span class="nav-icon"><el-icon><OfficeBuilding /></el-icon></span>
             <span class="nav-copy">
@@ -33,6 +26,13 @@
               <small>目标站点、分组映射、自动同步</small>
             </span>
           </router-link>
+          <router-link to="/upstreams" class="nav-item" active-class="active" @click="closeMobileNav">
+            <span class="nav-icon"><el-icon><Connection /></el-icon></span>
+            <span class="nav-copy">
+              <strong>上游管理</strong>
+              <small>轮询、健康度、倍率快照</small>
+            </span>
+          </router-link>
           <router-link to="/webhooks" class="nav-item" active-class="active" @click="closeMobileNav">
             <span class="nav-icon"><el-icon><Bell /></el-icon></span>
             <span class="nav-copy">
@@ -531,11 +531,6 @@ watch([() => route.path, customPages], () => {
   background: rgba(25, 19, 16, 0.7);
 }
 
-.topbar:not(.compact) {
-  width: min(100%, var(--content-max));
-  margin: 0 auto;
-}
-
 .topbar.compact {
   min-height: 2.8rem;
   padding: 0.4rem 0.75rem;