fix(kiro,pool,model): 对齐 Kiro 管理链路并修复全局模型删除行为 (#305)

* feat(pool): 号池支持跳过额度耗尽账号

- 新增 pool_advanced.skip_exhausted_accounts 开关及高级设置 UI, 默认关闭并兼容旧配置
- 为 Codex/Kiro 增加额度耗尽判定, 接入请求侧候选跳过并新增 account_quota_exhausted skip reason
- 号池列表将额度耗尽账号标记为 blocked/额度耗尽, 并补充前后端相关测试

* fix(kiro): 对齐账号管理与 provider-query 的 Rust 行为

- 修复 Kiro 单条导入误走 import-refresh-token 的前端分流, 并为误用路径返回明确错误提示
- 为 Kiro 导入与本地请求链补齐 bearer 兼容, 同步放开账号启停等 Key 更新操作的 auth_type 校验
- 实现 Kiro provider-query 本地模型测试与 failover 执行链, 并修复结果弹窗在无 trace 时无法展示 attempts/响应体的问题

* fix(model): 删除全局模型时级联清理关联提供商模型

- 对齐 Python 版本删除逻辑, GlobalModel 删除前先在事务内清理关联的 Provider Model 记录
- 修复已绑定 Provider 的模型在 Rust SQL 仓库下会被外键约束拦住、无法正常删除的问题
- 增加管理端回归测试, 覆盖绑定 Provider Model 的 GlobalModel 删除场景

* fix(kiro,ci): 恢复 Kiro OAuth 持久化并修复 Rust CI

* Fix oauth-managed provider key semantics

---------

Co-authored-by: fawney19 <[email protected]>

apps/aether-gateway/src/handlers/admin/provider/pool/config.rs

@@ -53,6 +53,7 @@ pub(crate) fn admin_provider_pool_config(
     let Some(pool_advanced) = raw_pool_advanced.as_object() else {
         return Some(AdminProviderPoolConfig {
             lru_enabled: false,
+            skip_exhausted_accounts: false,
             cost_window_seconds: 18_000,
             cost_limit_per_key_tokens: None,
         });
@@ -60,6 +61,10 @@ pub(crate) fn admin_provider_pool_config(
 
     Some(AdminProviderPoolConfig {
         lru_enabled: admin_provider_pool_lru_enabled(pool_advanced),
+        skip_exhausted_accounts: pool_advanced
+            .get("skip_exhausted_accounts")
+            .and_then(Value::as_bool)
+            .unwrap_or(false),
         cost_window_seconds: pool_advanced
             .get("cost_window_seconds")
             .and_then(json_u64)
@@ -70,3 +75,57 @@ pub(crate) fn admin_provider_pool_config(
             .and_then(json_u64),
     })
 }
+
+#[cfg(test)]
+mod tests {
+    use super::admin_provider_pool_config;
+    use aether_data_contracts::repository::provider_catalog::StoredProviderCatalogProvider;
+    use serde_json::json;
+
+    fn sample_provider(config: serde_json::Value) -> StoredProviderCatalogProvider {
+        StoredProviderCatalogProvider::new(
+            "provider-1".to_string(),
+            "provider-1".to_string(),
+            Some("https://example.com".to_string()),
+            "codex".to_string(),
+        )
+        .expect("provider should build")
+        .with_transport_fields(
+            true,
+            false,
+            false,
+            None,
+            None,
+            None,
+            None,
+            None,
+            Some(config),
+        )
+    }
+
+    #[test]
+    fn defaults_skip_exhausted_accounts_to_false() {
+        let provider = sample_provider(json!({ "pool_advanced": {} }));
+        let config = admin_provider_pool_config(&provider).expect("pool config should exist");
+
+        assert!(!config.skip_exhausted_accounts);
+    }
+
+    #[test]
+    fn parses_skip_exhausted_accounts_from_pool_advanced() {
+        let provider = sample_provider(json!({
+            "pool_advanced": {
+                "skip_exhausted_accounts": true,
+                "lru_enabled": true,
+                "cost_window_seconds": 7200,
+                "cost_limit_per_key_tokens": 12000
+            }
+        }));
+        let config = admin_provider_pool_config(&provider).expect("pool config should exist");
+
+        assert!(config.skip_exhausted_accounts);
+        assert!(config.lru_enabled);
+        assert_eq!(config.cost_window_seconds, 7200);
+        assert_eq!(config.cost_limit_per_key_tokens, Some(12_000));
+    }
+}