refactor: 大规模模块拆分与代码精简，新增 ai-pipeline/data-contracts 独立 crate

- 新增 aether-ai-pipeline 和 aether-data-contracts crate，将 pipeline 逻辑与数据契约从 gateway 中解耦
- 重构 admin handlers：拆分单体模块为 auth/billing/endpoint/features/model/observability/provider/system 等独立子模块
- 合并 chat/cli 重复代码路径：精简 conversion、finalize、planner 中的 sync/chat/cli 分支
- 重构 scheduler/executor/data 层，引入 facade 模式降低模块间耦合
- 移除冗余的 intent 模块，将 plan_fallback/policy/stream_path/sync_path 迁移至 executor
- 前端适配：调整 admin API 调用和 provider 模型测试对话框

apps/aether-gateway/src/control/auth/resolution.rs

@@ -7,9 +7,7 @@ use serde::{Deserialize, Serialize};
 use serde_json::Value;
 use tracing::{debug, info};
 
-use crate::wallet_runtime::{
-    local_rejection_from_wallet_access, resolve_wallet_auth_gate,
-};
+use crate::wallet_runtime::{local_rejection_from_wallet_access, resolve_wallet_auth_gate};
 use crate::{AppState, GatewayError};
 
 use super::super::GatewayControlDecision;
@@ -483,8 +481,10 @@ pub(super) async fn resolve_data_backed_auth_context(
         }
         Some(GatewayPrincipalCandidate::ApiKeyHash { key_hash, .. }) => {
             let snapshot = state
+                .data
                 .read_auth_api_key_snapshot_by_key_hash(&key_hash, now_unix_secs)
-                .await?;
+                .await
+                .map_err(|err| GatewayError::Internal(err.to_string()))?;
             let Some(snapshot) = snapshot else {
                 return Ok(Some(GatewayControlAuthContext {
                     user_id: String::new(),
@@ -527,12 +527,14 @@ async fn resolve_trusted_auth_context(
     now_unix_secs: u64,
 ) -> Result<Option<GatewayControlAuthContext>, GatewayError> {
     let snapshot = state
+        .data
         .read_auth_api_key_snapshot(
             &trusted_headers.user_id,
             &trusted_headers.api_key_id,
             now_unix_secs,
         )
-        .await?;
+        .await
+        .map_err(|err| GatewayError::Internal(err.to_string()))?;
     let Some(snapshot) = snapshot else {
         return Ok(Some(GatewayControlAuthContext {
             user_id: trusted_headers.user_id,