feat: 统一 SSL 证书配置并支持用户创建时设置访问权限

- 新增 ssl_utils.py 模块，统一使用 certifi 证书
- 将所有 httpx 客户端的 verify 参数改为使用 get_ssl_context()
- 管理员创建用户时支持设置 allowed_providers/api_formats/models
- 修复 provider_ops 敏感字段列表缺失 session_cookie

src/api/admin/models/external.py

@@ -14,6 +14,7 @@ from src.clients import get_redis_client
 from src.core.logger import logger
 from src.models.database import User
 from src.utils.auth_utils import require_admin
+from src.utils.ssl_utils import get_ssl_context
 
 router = APIRouter()
 
@@ -118,7 +119,7 @@ async def get_external_models(_: User = Depends(require_admin)) -> JSONResponse:
 
     # 从 models.dev 获取数据
     try:
-        async with httpx.AsyncClient(timeout=30.0) as client:
+        async with httpx.AsyncClient(timeout=30.0, verify=get_ssl_context()) as client:
             response = await client.get("https://models.dev/api.json")
             response.raise_for_status()
             data = response.json()