feat: 编辑器与帖子展示布局优化 + 新增个人空间

- 编辑器投稿页布局优化：标题与编辑器高度动态适配，工具栏与内容区视觉对齐
- 稿件展示页布局优化：MD 渲染区与评论区视觉分离，代码块主题微调
- CSRF 中间件：图像上传端点豁免，解决 Vditor 拖拽/粘贴上传 403
- Post 状态映射、GetGinUser、SaveUploadedFile 提取至 common 包，遵循审计建议
- 新增个人空间功能：/space（需登录）重定向到 /space/:uid，/space/:uid 公开访问
- 空间页模板：参考 B 站布局，展示头像、用户名、个性签名、UID、加入时间及稿件列表
- 导航栏：用户名链接指向 /space，新增「设置」入口
- 分层实现：SpaceController → SpaceService → PostRepo.FindByUserID，严格 ISP 接口隔离

internal/router/deps_core.go

@@ -17,6 +17,7 @@ type dependencies struct {
 	settingsCtrl    *controller.SettingsController
 	messageCtrl     *controller.MessageController
 	postCtrl        *controller.PostController
+	spaceCtrl       *controller.SpaceController
 	adminPostCtrl   *adminCtrl.AdminPostController
 	adminCtrl       *adminCtrl.AdminController
 	auditCtrl       *adminCtrl.AuditController

internal/router/deps_extra.go

@@ -36,9 +36,14 @@ func buildDeps(db *gorm.DB, cfg *config.Config, siteSettings *config.SiteSetting
 	postCtrl := controller.NewPostController(postService, shortcodeSvc)
 	adminPostCtrl := adminCtrl.NewAdminPostController(postService)
 
+	// 用户空间
+	spaceService := service.NewSpaceService(userRepo, postRepo)
+	spaceCtrl := controller.NewSpaceController(spaceService)
+
 	return &dependencies{
 		authCtrl: authCtrl, authMdw: authMdw, settingsCtrl: settingsCtrl,
-		messageCtrl: messageController, postCtrl: postCtrl, adminPostCtrl: adminPostCtrl,
+		messageCtrl: messageController, postCtrl: postCtrl, spaceCtrl: spaceCtrl,
+		adminPostCtrl: adminPostCtrl,
 		adminCtrl: adminController, auditCtrl: auditController,
 		siteSettingCtrl: siteSettingController, tokenCtrl: authCtrl,
 	}

internal/router/frontend.go

@@ -34,6 +34,10 @@ func setupFrontendRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
 		pages.GET("/settings/:tab", d.settingsCtrl.SettingsPage)
 		pages.GET("/messages", d.messageCtrl.MessagesPage)
 
+		// 用户空间（静态 /space 必须在 :uid 之前注册）
+		pages.GET("/space", d.spaceCtrl.MySpace)
+		pages.GET("/space/:uid", d.spaceCtrl.ShowSpace)
+
 		// 帖子页面
 		pages.GET("/posts", d.postCtrl.ListPage)
 		pages.GET("/posts/new", d.authMdw.Required(), d.postCtrl.NewPage)