refactor: 文件行数超标拆解（Service + Controller 9/16 完成）

- Service 层：energy_service → energize/operations/admin/query 四文件
- Service 层：post_service → helpers/audit + 核心 CRUD 保留
- Service 层：favorite_service → items + 核心文件夹操作保留
- Service 层：auth_service → password + 核心注册/登录保留
- Service 层：notification_service → notify + 核心列表/已读保留
- Service 层：audit_service → review + 核心列表/详情保留
- Controller 层：studio_controller → page/write/api/post_api/action 五文件
- Controller 层：post_controller → page/api/upload 三文件
- Controller 层：comment_controller → list/write/action/upload 四文件
- 清理未使用导入（notification_service.go 移除 fmt）

internal/controller/studio_post_api_controller.go

@@ -0,0 +1,80 @@
+package controller
+
+import (
+	"net/http"
+	"strconv"
+
+	"metazone.cc/metalab/internal/common"
+	"metazone.cc/metalab/internal/model"
+
+	"github.com/gin-gonic/gin"
+)
+
+// Create 创建/发布帖子
+func (ctrl *StudioController) Create(c *gin.Context) {
+	uid, _, ok := common.GetGinUser(c)
+	if !ok {
+		common.Error(c, http.StatusUnauthorized, "请先登录")
+		return
+	}
+
+	// LV0 用户不允许投稿
+	if expVal, exists := c.Get("exp"); exists {
+		if exp, ok := expVal.(int); ok && exp < 1 {
+			common.Error(c, http.StatusForbidden, "经验不足，Lv1 解锁投稿")
+			return
+		}
+	}
+
+	var req model.PostCreateRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		common.Error(c, http.StatusBadRequest, "标题和正文不能为空")
+		return
+	}
+
+	post, err := ctrl.postService.Create(uid, req.Title, req.Body)
+	if err != nil {
+		common.Error(c, http.StatusInternalServerError, "发布失败")
+		return
+	}
+
+	common.OkWithMessage(c, post, "发布成功")
+}
+
+// Update 编辑帖子
+func (ctrl *StudioController) Update(c *gin.Context) {
+	uid, role, ok := common.GetGinUser(c)
+	if !ok {
+		common.Error(c, http.StatusUnauthorized, "请先登录")
+		return
+	}
+
+	id, err := strconv.ParseUint(c.Param("id"), 10, 64)
+	if err != nil {
+		common.Error(c, http.StatusBadRequest, "无效的帖子 ID")
+		return
+	}
+
+	var req model.PostUpdateRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		common.Error(c, http.StatusBadRequest, "标题和正文不能为空")
+		return
+	}
+
+	post, getErr := ctrl.postService.GetByID(uint(id))
+	if getErr != nil {
+		common.Error(c, http.StatusNotFound, "帖子不存在")
+		return
+	}
+	if !ctrl.postService.IsPostAccessible(uid, role, post.UserID) {
+		common.Error(c, http.StatusForbidden, "无权操作此帖子")
+		return
+	}
+
+	if err := ctrl.postService.Update(uint(id), req.Title, req.Body); err != nil {
+		common.Error(c, http.StatusInternalServerError, "编辑失败")
+		return
+	}
+
+	common.OkMessage(c, "编辑成功")
+}