fix: restore security hardening compatibility and validation

Restore authorized rule reveal, explicit full HTTP capture and retention, video task business fields, and valid payment URLs. Add opt-in credential preservation for trusted recovery, fix frontend type contracts and async races, and eliminate PostgreSQL test fixture resource leaks. Document audit coverage and successful fmt and CI-scoped Clippy checks.

frontend/src/router/index.ts

@@ -25,7 +25,7 @@ router.beforeEach(async (to, from, next) => {
 
     // 首页重定向
     const homeRedirect = resolveHomeRedirect(to, from, authStore)
-    if (homeRedirect !== null) return next(homeRedirect === '' ? undefined : homeRedirect)
+    if (homeRedirect !== null) return homeRedirect === '' ? next() : next(homeRedirect)
 
     // 需要认证但未认证
     if (requiresAuth && !isAuthenticated) {