feat(oauth): 新增 Codex account_user_id 和 organizations 字段采集、展示与判重

- 从 Codex id_token claims 和 token_response 中提取 account_user_id 和 organizations
- OAuth 判重逻辑改为优先按 account_user_id 匹配，支持同用户不同 Team 不误判
- 号池和 Provider 详情页展示组织标签、account ID 和 account_user_id
- 前端重复的 OAuth identity 工具函数提取到 utils/oauthIdentity.ts
- 后端重复的 normalize_oauth_organizations 提取到 core/provider_oauth_utils.py

frontend/src/features/pool/components/PoolAccountBatchDialog.vue

@@ -121,6 +121,18 @@
                 variant="outline"
                 class="text-[10px] px-1 py-0 h-4 shrink-0"
               >{{ key.oauth_plan_type }}</Badge>
+              <Badge
+                v-if="getPrimaryOAuthOrganizationTitle(key)"
+                variant="secondary"
+                class="text-[10px] px-1 py-0 h-4 shrink-0 max-w-[92px] truncate"
+                :title="getOAuthOrganizationsTooltip(key)"
+              >{{ getPrimaryOAuthOrganizationTitle(key) }}</Badge>
+              <Badge
+                v-if="key.oauth_account_id"
+                variant="secondary"
+                class="text-[10px] px-1 py-0 h-4 shrink-0"
+                :title="key.oauth_account_id"
+              >acct {{ formatOAuthIdentityShort(key.oauth_account_id) }}</Badge>
               <Badge
                 v-if="isBannedKey(key)"
                 variant="destructive"
@@ -129,6 +141,10 @@
             </div>
             <div class="flex items-center gap-1.5 mt-0.5 text-[11px] text-muted-foreground flex-wrap">
               <span :class="key.is_active ? '' : 'text-destructive'">{{ key.is_active ? '启用' : '禁用' }}</span>
+              <span
+                v-if="key.oauth_account_user_id"
+                :title="key.oauth_account_user_id"
+              >AUID {{ formatOAuthIdentityShort(key.oauth_account_user_id, 10, 8) }}</span>
               <span v-if="key.account_quota">{{ shortenQuota(key.account_quota) }}</span>
               <span v-if="key.proxy?.node_id">独立代理</span>
               <span
@@ -277,6 +293,7 @@ import {
 import { exportKey, refreshProviderQuota } from '@/api/endpoints/keys'
 import { refreshProviderOAuth } from '@/api/endpoints/provider_oauth'
 import { useProxyNodesStore } from '@/stores/proxy-nodes'
+import { formatOAuthIdentityShort, getPrimaryOAuthOrganizationTitle, getOAuthOrganizationsTooltip } from '@/utils/oauthIdentity'
 
 type QuickSelectorValue =
   | 'banned'