feat(oauth): 新增 Codex account_user_id 和 organizations 字段采集、展示与判重

- 从 Codex id_token claims 和 token_response 中提取 account_user_id 和 organizations
- OAuth 判重逻辑改为优先按 account_user_id 匹配，支持同用户不同 Team 不误判
- 号池和 Provider 详情页展示组织标签、account ID 和 account_user_id
- 前端重复的 OAuth identity 工具函数提取到 utils/oauthIdentity.ts
- 后端重复的 normalize_oauth_organizations 提取到 core/provider_oauth_utils.py

frontend/src/features/pool/components/PoolAccountBatchDialog.vue

@@ -121,6 +121,18 @@
                 variant="outline"
                 class="text-[10px] px-1 py-0 h-4 shrink-0"
               >{{ key.oauth_plan_type }}</Badge>
+              <Badge
+                v-if="getPrimaryOAuthOrganizationTitle(key)"
+                variant="secondary"
+                class="text-[10px] px-1 py-0 h-4 shrink-0 max-w-[92px] truncate"
+                :title="getOAuthOrganizationsTooltip(key)"
+              >{{ getPrimaryOAuthOrganizationTitle(key) }}</Badge>
+              <Badge
+                v-if="key.oauth_account_id"
+                variant="secondary"
+                class="text-[10px] px-1 py-0 h-4 shrink-0"
+                :title="key.oauth_account_id"
+              >acct {{ formatOAuthIdentityShort(key.oauth_account_id) }}</Badge>
               <Badge
                 v-if="isBannedKey(key)"
                 variant="destructive"
@@ -129,6 +141,10 @@
             </div>
             <div class="flex items-center gap-1.5 mt-0.5 text-[11px] text-muted-foreground flex-wrap">
               <span :class="key.is_active ? '' : 'text-destructive'">{{ key.is_active ? '启用' : '禁用' }}</span>
+              <span
+                v-if="key.oauth_account_user_id"
+                :title="key.oauth_account_user_id"
+              >AUID {{ formatOAuthIdentityShort(key.oauth_account_user_id, 10, 8) }}</span>
               <span v-if="key.account_quota">{{ shortenQuota(key.account_quota) }}</span>
               <span v-if="key.proxy?.node_id">独立代理</span>
               <span
@@ -277,6 +293,7 @@ import {
 import { exportKey, refreshProviderQuota } from '@/api/endpoints/keys'
 import { refreshProviderOAuth } from '@/api/endpoints/provider_oauth'
 import { useProxyNodesStore } from '@/stores/proxy-nodes'
+import { formatOAuthIdentityShort, getPrimaryOAuthOrganizationTitle, getOAuthOrganizationsTooltip } from '@/utils/oauthIdentity'
 
 type QuickSelectorValue =
   | 'banned'

frontend/src/features/providers/components/ProviderDetailDrawer.vue

@@ -289,6 +289,22 @@
                             >
                               {{ formatOAuthPlanType(key.oauth_plan_type) }}
                             </Badge>
+                            <Badge
+                              v-if="getPrimaryOAuthOrganizationTitle(key)"
+                              variant="secondary"
+                              class="text-[10px] px-1.5 py-0 shrink-0 max-w-[120px] truncate"
+                              :title="getOAuthOrganizationsTooltip(key)"
+                            >
+                              {{ getPrimaryOAuthOrganizationTitle(key) }}
+                            </Badge>
+                            <Badge
+                              v-if="key.oauth_account_id"
+                              variant="secondary"
+                              class="text-[10px] px-1.5 py-0 shrink-0"
+                              :title="key.oauth_account_id"
+                            >
+                              acct {{ formatOAuthIdentityShort(key.oauth_account_id) }}
+                            </Badge>
                             <!-- Kiro 订阅类型标签 -->
                             <Badge
                               v-if="provider.provider_type === 'kiro' && key.upstream_metadata?.kiro?.subscription_title"
@@ -303,6 +319,13 @@
                             <span class="text-[11px] font-mono text-muted-foreground">
                               {{ key.auth_type === 'oauth' ? '[Refresh Token]' : (key.auth_type === 'service_account' ? '[Service Account]' : key.api_key_masked) }}
                             </span>
+                            <span
+                              v-if="key.oauth_account_user_id"
+                              class="text-[10px] text-muted-foreground"
+                              :title="key.oauth_account_user_id"
+                            >
+                              AUID {{ formatOAuthIdentityShort(key.oauth_account_user_id, 10, 8) }}
+                            </span>
                             <Button
                               v-if="key.auth_type === 'oauth'"
                               variant="ghost"
@@ -1103,6 +1126,7 @@ import type { UpstreamMetadata, AntigravityModelQuota } from '@/api/endpoints/ty
 import { formatApiFormat } from '@/api/endpoints/types/api-format'
 import { isOAuthAccountProviderType, isKeyManagedProviderType } from '../utils/providerTypeUtils'
 import { isAccountLevelBlockReason, cleanAccountBlockReason } from '@/utils/accountBlock'
+import { formatOAuthIdentityShort, getPrimaryOAuthOrganizationTitle, getOAuthOrganizationsTooltip } from '@/utils/oauthIdentity'
 
 // 扩展端点类型,包含密钥列表
 interface ProviderEndpointWithKeys extends ProviderEndpoint {