fix: restore security hardening compatibility and validation

Restore authorized rule reveal, explicit full HTTP capture and retention, video task business fields, and valid payment URLs. Add opt-in credential preservation for trusted recovery, fix frontend type contracts and async races, and eliminate PostgreSQL test fixture resource leaks. Document audit coverage and successful fmt and CI-scoped Clippy checks.

frontend/src/features/providers/components/ProviderKeyImportSettingsFields.vue

@@ -98,7 +98,7 @@
       <div class="space-y-1.5">
         <Label class="text-xs">代理节点</Label>
         <ProxyNodeSelect
-          :model-value="settings.proxy_node_id"
+          :model-value="settings.proxy_node_id ?? ''"
           trigger-class="h-10"
           @update:model-value="updateSetting('proxy_node_id', $event)"
         />
@@ -106,7 +106,7 @@
       <div class="space-y-1.5">
         <Label class="text-xs">备注</Label>
         <Input
-          :model-value="settings.note"
+          :model-value="settings.note ?? ''"
           class="h-10"
           placeholder="可选"
           @update:model-value="updateSetting('note', String($event))"
@@ -186,4 +186,4 @@ function updateSetting<Key extends keyof ImportSettings>(
 ): void {
   emit('update:settings', { ...props.settings, [key]: value })
 }
-</script>
+</script>