feat: 统一 SSL 证书配置并支持用户创建时设置访问权限

- 新增 ssl_utils.py 模块，统一使用 certifi 证书
- 将所有 httpx 客户端的 verify 参数改为使用 get_ssl_context()
- 管理员创建用户时支持设置 allowed_providers/api_formats/models
- 修复 provider_ops 敏感字段列表缺失 session_cookie

src/api/admin/users/routes.py

@@ -227,6 +227,11 @@ class AdminCreateUserAdapter(AdminApiAdapter):
         else:
             quota_usd = SystemConfigService.get_config(db, "default_user_quota_usd", default=10.0)
 
+        # 处理访问权限字段：空数组转为 None（表示无限制）
+        allowed_providers = request.allowed_providers if request.allowed_providers else None
+        allowed_api_formats = request.allowed_api_formats if request.allowed_api_formats else None
+        allowed_models = request.allowed_models if request.allowed_models else None
+
         try:
             user = UserService.create_user(
                 db=db,
@@ -235,6 +240,9 @@ class AdminCreateUserAdapter(AdminApiAdapter):
                 password=request.password,
                 role=role,
                 quota_usd=quota_usd,
+                allowed_providers=allowed_providers,
+                allowed_api_formats=allowed_api_formats,
+                allowed_models=allowed_models,
             )
         except ValueError as exc:
             raise InvalidRequestException(str(exc))