fix: 设计原则审查修复 — DIP/ISP, LoD, DRY, OCP, URL, 301缓存

- P0 DIP+ISP: 全链路注入接口，消除零接口紧耦合
- P0 URL: auth 301→302，修复登出后浏览器缓存陷阱
- P1 DRY: JWT 认证逻辑收敛至 TokenService+中间件
- P2 DRY: 前后端角色/状态映射统一为 model 常量
- P2 LoD: 新增 SettingsController，router 不再跨层调 repo
- P2 URL: settings ?tab= → /settings/:tab 伪静态
- P3 OCP: 角色权限 map 化，告别硬编码 switch

internal/controller/settings_controller.go

@@ -0,0 +1,57 @@
+package controller
+
+import (
+	"net/http"
+
+	"metazone.cc/metalab/internal/common"
+	"metazone.cc/metalab/internal/model"
+
+	"github.com/gin-gonic/gin"
+)
+
+// profileProvider SettingsController 对 Service 层的最小依赖（ISP：1 个方法）
+type profileProvider interface {
+	GetProfile(userID uint) (*model.User, error)
+}
+
+// SettingsController 个人设置控制器
+type SettingsController struct {
+	authService profileProvider
+}
+
+// NewSettingsController 构造函数
+func NewSettingsController(authService profileProvider) *SettingsController {
+	return &SettingsController{authService: authService}
+}
+
+// SettingsPage 个人设置页面（需登录）
+func (sc *SettingsController) SettingsPage(c *gin.Context) {
+	uidVal, exists := c.Get("uid")
+	if !exists {
+		c.Redirect(http.StatusFound, "/auth/login")
+		c.Abort()
+		return
+	}
+	uid := uidVal.(uint)
+
+	tab := c.Param("tab")
+	if tab != "profile" && tab != "account" {
+		c.String(http.StatusNotFound, "页面不存在")
+		return
+	}
+
+	user, err := sc.authService.GetProfile(uid)
+	if err != nil || user == nil {
+		c.String(http.StatusNotFound, "用户不存在")
+		return
+	}
+
+	c.HTML(http.StatusOK, "settings/index.html", common.BuildPageData(c, gin.H{
+		"Title":      "个人设置",
+		"ExtraCSS":   "/static/css/settings.css",
+		"ActiveTab":  tab,
+		"User":       user,
+		"RoleName":   model.RoleDisplayNames[user.Role],
+		"StatusName": model.StatusDisplayNames[user.Status],
+	}))
+}