fix(kiro,pool,model): 对齐 Kiro 管理链路并修复全局模型删除行为 (#305)

* feat(pool): 号池支持跳过额度耗尽账号

- 新增 pool_advanced.skip_exhausted_accounts 开关及高级设置 UI, 默认关闭并兼容旧配置
- 为 Codex/Kiro 增加额度耗尽判定, 接入请求侧候选跳过并新增 account_quota_exhausted skip reason
- 号池列表将额度耗尽账号标记为 blocked/额度耗尽, 并补充前后端相关测试

* fix(kiro): 对齐账号管理与 provider-query 的 Rust 行为

- 修复 Kiro 单条导入误走 import-refresh-token 的前端分流, 并为误用路径返回明确错误提示
- 为 Kiro 导入与本地请求链补齐 bearer 兼容, 同步放开账号启停等 Key 更新操作的 auth_type 校验
- 实现 Kiro provider-query 本地模型测试与 failover 执行链, 并修复结果弹窗在无 trace 时无法展示 attempts/响应体的问题

* fix(model): 删除全局模型时级联清理关联提供商模型

- 对齐 Python 版本删除逻辑, GlobalModel 删除前先在事务内清理关联的 Provider Model 记录
- 修复已绑定 Provider 的模型在 Rust SQL 仓库下会被外键约束拦住、无法正常删除的问题
- 增加管理端回归测试, 覆盖绑定 Provider Model 的 GlobalModel 删除场景

* fix(kiro,ci): 恢复 Kiro OAuth 持久化并修复 Rust CI

* Fix oauth-managed provider key semantics

---------

Co-authored-by: fawney19 <elky0401@gmail.com>

crates/aether-scheduler-core/src/candidate.rs

@@ -370,6 +370,7 @@ pub struct CandidateRuntimeSelectabilityInput<'a> {
     pub now_unix_secs: u64,
     pub cached_affinity_target: Option<&'a crate::SchedulerAffinityTarget>,
     pub provider_quota_blocks_requests: bool,
+    pub account_quota_exhausted: bool,
     pub rpm_reset_at: Option<u64>,
 }
 
@@ -390,12 +391,16 @@ pub fn candidate_runtime_skip_reason_with_state(
         now_unix_secs,
         cached_affinity_target,
         provider_quota_blocks_requests,
+        account_quota_exhausted,
         rpm_reset_at,
     } = input;
 
     if provider_quota_blocks_requests {
         return Some("provider_quota_blocked");
     }
+    if account_quota_exhausted {
+        return Some("account_quota_exhausted");
+    }
     if crate::is_candidate_in_recent_failure_cooldown(
         recent_candidates,
         candidate.provider_id.as_str(),
@@ -808,6 +813,7 @@ mod tests {
                 now_unix_secs: 100,
                 cached_affinity_target: None,
                 provider_quota_blocks_requests: false,
+                account_quota_exhausted: false,
                 rpm_reset_at: None,
             },
         ));
@@ -826,6 +832,7 @@ mod tests {
                 now_unix_secs: 100,
                 cached_affinity_target: None,
                 provider_quota_blocks_requests: false,
+                account_quota_exhausted: false,
                 rpm_reset_at: None,
             },
         ));
@@ -838,6 +845,24 @@ mod tests {
                 now_unix_secs: 100,
                 cached_affinity_target: None,
                 provider_quota_blocks_requests: true,
+                account_quota_exhausted: false,
+                rpm_reset_at: None,
+            },
+        ));
+    }
+
+    #[test]
+    fn candidate_selectability_rejects_exhausted_account_quota() {
+        assert!(!candidate_is_selectable_with_runtime_state(
+            CandidateRuntimeSelectabilityInput {
+                candidate: &sample_candidate("1", None),
+                recent_candidates: &[],
+                provider_concurrent_limits: &BTreeMap::new(),
+                provider_key_rpm_states: &BTreeMap::new(),
+                now_unix_secs: 100,
+                cached_affinity_target: None,
+                provider_quota_blocks_requests: false,
+                account_quota_exhausted: true,
                 rpm_reset_at: None,
             },
         ));