feat(auth): 注册页人机验证 + 邮箱验证码；品牌标识去 DeepSeek（附域名迁移线 序㊿ 补提交）

三条线合并入库 —— 均已完成并上线（源码与生产一致，此前只部署未入仓）。
⚠️ 其中域名迁移线为**另一会话**产出，本会话只做入库、**未复验其正确性**（它自报零回归）。

【档案 134 · 注册页人机验证 + 邮箱验证码】
- DB 迁移 v10：users.email（唯一索引 LOWER(email)）+ email_codes 事件表（2 索引）
- 新增模块 src/web/{register-guard,mail,turnstile,email-code}.ts
- routes/auth.ts：新增 GET /api/auth/register/config、POST /api/auth/register/email-code；
  注册接口加人机验证与验证码校验；config.ts 新增 12 项配置（默认空 ⇒ 不配 = 老行为）
- 邮件走**可插拔驱动**（brevo/http/log），发件人 [email protected]（Brevo 域名已认证 + DKIM + SPF）
- 防爆破：三层配额（邮箱 6/h、8/天；IP 20/h；全局 200/h）+ 递增冷却阶梯
  （60→60→180→300→900→1800s）+ 试错 5 次作废 + 码只存哈希 + 单次使用 + 与用户名绑定
- Turnstile 服务端校 **success + action + hostname 三项**：sitekey 是公开的，
  只校 success 时"拿我们的 sitekey 在自己站点替真人取合法 token 再打我们接口"这条路是通的
- 新增 test/register-guard.test.mjs（19 用例）

【档案 137 · 品牌标识改造 — 去 DeepSeek 图形】
- login/register/admin 页头：删 DeepSeek 鲸鱼图标 + 「DeepSeek」文字图形
  → 平台标识（中文「能力枢纽」／英语及其他语言「CapabilityNet」，走 i18n 词条 brand.name）
- portal 顶栏换图标（页面名「管理门户」保留）
- 新建 web/favicon.svg（平台自有 hub 图标，避开 DeepSeek 蓝）+ 四页 favicon 指向它
- 新增 test/i18n-brand.test.mjs（node:vm 跑真实 i18n.js，六条语言路径断言渲染结果）
- scripts/verify-static.mjs 新增 SVG 段：XML 注释不得含 ASCII 双连字符（否则整份 SVG
  解析失败、图标静默不显示 —— 实际踩到过）
- 🔴 会话页面（实例内官方 dsh 界面）的标识**按用户要求未动**（也受 R2 约束）

【档案 135/136 · 域名迁移线（另一会话产出）】
- 域名收敛为 ai1net.com；旧域 alotbuy.com 降级为 301 过渡装置
- src/net/relay/{addr-override,directory,rendezvous,switcher}.ts 种子与候选链更新；
  src/web/server.ts、src/worker/relay-tunnel.ts、scripts/verify-cluster-domain.mjs
- 档案 136 = 控制面按两台中继取并集（**已立项、未落地**）

验证（本会话两条线）：新增单测 21 条全通过｜全量 221 pass / 0 fail / 1 skipped｜
verify-static 全合格｜其余 10 个 verify 脚本全 OK｜线上实测：Turnstile 假 token 403、
发码 delivered、四页 deepseek 命中 0、favicon 200。

src/db/sqlite.ts

@@ -14,6 +14,8 @@ import { openDatabase, type Database } from './connection.js'
 import { mapSqliteError } from './errors.js'
 import {
   audit as auditSync,
+  bumpEmailCodeAttempts as bumpEmailCodeAttemptsSync,
+  consumeEmailCode as consumeEmailCodeSync,
   countAdmins as countAdminsSync,
   createSession as createSessionSync,
   createUser as createUserSync,
@@ -24,6 +26,7 @@ import {
   deleteUser as deleteUserSync,
   deleteUserInstances as deleteUserInstancesSync,
   deleteUserSessions as deleteUserSessionsSync,
+  emailCodeCounts as emailCodeCountsSync,
   findBusinessPlugin as findBusinessPluginSync,
   findDomainById as findDomainByIdSync,
   findDomainByUser as findDomainByUserSync,
@@ -31,6 +34,7 @@ import {
   findSession as findSessionSync,
   findSessionWithUser as findSessionWithUserSync,
   hasActiveSession as hasActiveSessionSync,
+  findUserByEmail as findUserByEmailSync,
   findUserById as findUserByIdSync,
   findUserBySlug as findUserBySlugSync,
   findUserByUsername as findUserByUsernameSync,
@@ -40,6 +44,7 @@ import {
   getEnabledPluginIds as getEnabledPluginIdsSync,
   getOrCreateWorkspace as getOrCreateWorkspaceSync,
   getSharedModelEnabled as getSharedModelEnabledSync,
+  latestSentEmailCode as latestSentEmailCodeSync,
   listBusinessPlugins as listBusinessPluginsSync,
   listCredentialKeys as listCredentialKeysSync,
   listCredentialLandingRows as listCredentialLandingRowsSync,
@@ -48,6 +53,8 @@ import {
   listInstancesByRole as listInstancesByRoleSync,
   listPublicUsers as listPublicUsersSync,
   listUsersWithoutUid as listUsersWithoutUidSync,
+  purgeEmailCodes as purgeEmailCodesSync,
+  recordEmailCode as recordEmailCodeSync,
   selectCredentialKey as selectCredentialKeySync,
   setCredentialKey as setCredentialKeySync,
   setDomainVerified as setDomainVerifiedSync,
@@ -86,7 +93,10 @@ import type {
   DshInstance,
   DshInstanceRole,
   DshInstanceStatus,
+  EmailCodeCounts,
+  EmailCodeRow,
   PublicUser,
+  RecordEmailCodeInput,
   SessionRow,
   SessionUser,
   UpsertBusinessPluginInput,
@@ -176,6 +186,35 @@ export class SqliteAdapter implements DbAdapter {
     auditSync(this.db, actor, action, detail)
   }
 
+  // ── v10 邮箱验证码（注册页）────────────────────────────────────────────────
+  async findUserByEmail(email: string): Promise<User | undefined> {
+    return findUserByEmailSync(this.db, email)
+  }
+
+  async recordEmailCode(input: RecordEmailCodeInput): Promise<void> {
+    recordEmailCodeSync(this.db, input)
+  }
+
+  async emailCodeCounts(email: string, ip: string | null, since: number): Promise<EmailCodeCounts> {
+    return emailCodeCountsSync(this.db, email, ip, since)
+  }
+
+  async latestSentEmailCode(email: string, purpose: string): Promise<EmailCodeRow | undefined> {
+    return latestSentEmailCodeSync(this.db, email, purpose)
+  }
+
+  async bumpEmailCodeAttempts(id: string, consume: boolean, now: number): Promise<boolean> {
+    return bumpEmailCodeAttemptsSync(this.db, id, consume, now)
+  }
+
+  async consumeEmailCode(id: string, now: number): Promise<boolean> {
+    return consumeEmailCodeSync(this.db, id, now)
+  }
+
+  async purgeEmailCodes(before: number): Promise<number> {
+    return purgeEmailCodesSync(this.db, before)
+  }
+
   async findWorkspaceByPath(userId: string, relPath: string): Promise<Workspace | undefined> {
     return findWorkspaceByPathSync(this.db, userId, relPath)
   }