feat: 编辑器与帖子展示布局优化 + 新增个人空间

- 编辑器投稿页布局优化：标题与编辑器高度动态适配，工具栏与内容区视觉对齐
- 稿件展示页布局优化：MD 渲染区与评论区视觉分离，代码块主题微调
- CSRF 中间件：图像上传端点豁免，解决 Vditor 拖拽/粘贴上传 403
- Post 状态映射、GetGinUser、SaveUploadedFile 提取至 common 包，遵循审计建议
- 新增个人空间功能：/space（需登录）重定向到 /space/:uid，/space/:uid 公开访问
- 空间页模板：参考 B 站布局，展示头像、用户名、个性签名、UID、加入时间及稿件列表
- 导航栏：用户名链接指向 /space，新增「设置」入口
- 分层实现：SpaceController → SpaceService → PostRepo.FindByUserID，严格 ISP 接口隔离

internal/repository/post_repo.go

@@ -45,35 +45,8 @@ func (r *PostRepo) FindByIDWithAuthor(id uint) (*model.Post, error) {
 	return &post, nil
 }
 
-// FindPageable 分页查询帖子列表（仅 approved 状态，关键词模糊搜索标题）
-func (r *PostRepo) FindPageable(keyword string, offset, limit int) ([]model.Post, int64, error) {
-	query := r.db.Table("posts").
-		Select("posts.*, users.username as author_name").
-		Joins("LEFT JOIN users ON users.uid = posts.user_id").
-		Where("posts.deleted_at IS NULL").
-		Where("posts.status = ?", model.PostStatusApproved)
-
-	if keyword != "" {
-		like := "%" + keyword + "%"
-		query = query.Where("posts.title LIKE ?", like)
-	}
-
-	var total int64
-	if err := query.Count(&total).Error; err != nil {
-		return nil, 0, err
-	}
-
-	var posts []model.Post
-	err := query.Order("posts.created_at DESC").
-		Offset(offset).Limit(limit).Find(&posts).Error
-	if err != nil {
-		return nil, 0, err
-	}
-	return posts, total, nil
-}
-
-// FindAdminPageable 管理后台分页查询（全状态筛选）
-func (r *PostRepo) FindAdminPageable(keyword, status string, offset, limit int) ([]model.Post, int64, error) {
+// buildQuery 构建帖子查询公共部分（联表 + 未删除 + 关键词 + 可选状态过滤）
+func (r *PostRepo) buildQuery(keyword, status string) *gorm.DB {
 	query := r.db.Table("posts").
 		Select("posts.*, users.username as author_name").
 		Joins("LEFT JOIN users ON users.uid = posts.user_id").
@@ -86,7 +59,30 @@ func (r *PostRepo) FindAdminPageable(keyword, status string, offset, limit int)
 	if status != "" {
 		query = query.Where("posts.status = ?", status)
 	}
+	return query
+}
 
+// FindPageable 分页查询帖子列表（仅 approved 状态，关键词模糊搜索标题）
+func (r *PostRepo) FindPageable(keyword string, offset, limit int) ([]model.Post, int64, error) {
+	query := r.buildQuery(keyword, model.PostStatusApproved)
+	return r.pageResults(query, offset, limit)
+}
+
+// FindAdminPageable 管理后台分页查询（全状态筛选）
+func (r *PostRepo) FindAdminPageable(keyword, status string, offset, limit int) ([]model.Post, int64, error) {
+	query := r.buildQuery(keyword, status)
+	return r.pageResults(query, offset, limit)
+}
+
+// FindByUserID 分页查询某用户发布的帖子（仅 approved，含作者用户名）
+func (r *PostRepo) FindByUserID(userID uint, offset, limit int) ([]model.Post, int64, error) {
+	query := r.buildQuery("", model.PostStatusApproved).
+		Where("posts.user_id = ?", userID)
+	return r.pageResults(query, offset, limit)
+}
+
+// pageResults 执行 Count + Offset/Limit + ORDER BY
+func (r *PostRepo) pageResults(query *gorm.DB, offset, limit int) ([]model.Post, int64, error) {
 	var total int64
 	if err := query.Count(&total).Error; err != nil {
 		return nil, 0, err
@@ -113,5 +109,12 @@ func (r *PostRepo) SoftDelete(id uint) error {
 
 // Restore 恢复软删除
 func (r *PostRepo) Restore(id uint) error {
-	return r.db.Unscoped().Model(&model.Post{}).Where("id = ?", id).Update("deleted_at", nil).Error
+	result := r.db.Unscoped().Model(&model.Post{}).Where("id = ?", id).Update("deleted_at", nil)
+	if result.Error != nil {
+		return result.Error
+	}
+	if result.RowsAffected == 0 {
+		return gorm.ErrRecordNotFound
+	}
+	return nil
 }