fix: comprehensive security, quality and consistency fixes

Server:
- Block startup with default JWT secrets in production
- Make subscription verify admin-only (no payment integration yet)
- Add device ownership validation on command/result, event, treatment/sync
- Remove admin token from request body fallback
- Add pageParams boundary protection (pageSize capped at 100)
- Fix COS getObjectUrl to use callback-based Promise
- Add settings key whitelist matching frontend fields
- Add user existence check before subscription creation
- Fix firmware always returning has_update:true
- Replace hardcoded trial subscription with actual DB query
- Extract shared utilities (limitClause, toMysqlDate, formatDate)

Miniprogram:
- Replace fake PD random data with placeholder
- Mark client-timer treatment completions with source field
- Disable mock.js
- Fix BLE listener leaks (save refs, cleanup in onUnload)
- Fix ble.off clearing all listeners (pass specific callback)
- Add BLE disconnect detection via onBLEConnectionStateChange
- Fix subscription status type consistency (number not string)
- Fix scan callback accumulation in ble.js
- Fix history stats accumulation across pages
- Fix subscribe-success/treatment-done hardcoded values
- Fix profile subscription view logic
- Replace purchase flow with admin-contact modal
- Add error logging in command-sync report

Admin console:
- Fix AdminLayout logout (require->import, logout->clearToken)
- Remove all mock data from production request.js
- Replace dashboard fake data with real API calls
- Replace monthly_revenue with subscription_count
- Fix subscription stats fallback (|| -> ??)
- Add token expiry tracking (7 days)
- Unify device status map and subscription status text
- Fix user page record link navigation
- Fix subscription createForm.user_id type handling
- Add error feedback in all empty catch blocks
- Remove unused remember checkbox and uview-plus dependency
- Extract common CSS to shared stylesheet (-900 lines)
- Extract formatDate to shared utils/format.js
- Show real admin name in layout header

miniprogram/pages/history/history.js

@@ -6,6 +6,7 @@ Page({
     records: [],
     total: 0,
     totalHours: 0,
+    totalMs: 0,
     monthCount: 0,
     page: 1,
     pageSize: 20,
@@ -43,14 +44,14 @@ Page({
       page: page,
       page_size: self.data.pageSize
     }).then(function (data) {
-      var totalMs = 0
+      var pageMs = 0
       var now = new Date()
       var monthStart = new Date(now.getFullYear(), now.getMonth(), 1)
-      var monthCount = 0
+      var monthCount = refresh ? 0 : self.data.monthCount
 
       var records = (data.records || []).map(function (r) {
         var durationMin = Math.floor((r.total_duration_ms || 0) / 60000)
-        totalMs += (r.total_duration_ms || 0)
+        pageMs += (r.total_duration_ms || 0)
         r.duration_text = durationMin + '分钟'
         r.region_names = ble.getRegionName(r.regions || 0).join('、')
         r.wavelength_name = ble.getWavelengthName(r.wavelength || 2)
@@ -62,9 +63,12 @@ Page({
         return r
       })
 
+      var totalMs = refresh ? pageMs : self.data.totalMs + pageMs
+
       self.setData({
         records: refresh ? records : self.data.records.concat(records),
         total: data.total || 0,
+        totalMs: totalMs,
         totalHours: Math.round(totalMs / 3600000),
         monthCount: monthCount,
         page: page,