feat: 重构业务模块架构

- 新增auth模块处理认证逻辑
- 新增security模块处理安全相关功能
- 新增user-mgmt模块管理用户相关操作
- 新增shared模块存放共享组件
- 重构admin模块，添加DTO和Guards
- 为admin模块添加测试文件结构

src/business/admin/admin.controller.ts

@@ -15,10 +15,17 @@
 
 import { Body, Controller, Get, HttpCode, HttpStatus, Param, Post, Query, UseGuards, ValidationPipe, UsePipes, Res, Logger } from '@nestjs/common';
 import { ApiBearerAuth, ApiBody, ApiOperation, ApiParam, ApiProduces, ApiQuery, ApiResponse, ApiTags } from '@nestjs/swagger';
-import { AdminGuard } from '../../core/guards/admin.guard';
+import { AdminGuard } from './guards/admin.guard';
 import { AdminService } from './admin.service';
-import { AdminLoginDto, AdminResetPasswordDto } from '../../dto/admin.dto';
-import { AdminLoginResponseDto, AdminUsersResponseDto, AdminCommonResponseDto, AdminUserResponseDto, AdminRuntimeLogsResponseDto } from '../../dto/admin_response.dto';
+import { AdminLoginDto, AdminResetPasswordDto } from './dto/admin-login.dto';
+import { 
+  AdminLoginResponseDto, 
+  AdminUsersResponseDto, 
+  AdminCommonResponseDto, 
+  AdminUserResponseDto, 
+  AdminRuntimeLogsResponseDto 
+} from './dto/admin-response.dto';
+import { Throttle, ThrottlePresets } from '../security/decorators/throttle.decorator';
 import type { Response } from 'express';
 import * as fs from 'fs';
 import * as path from 'path';
@@ -35,6 +42,10 @@ export class AdminController {
   @ApiOperation({ summary: '管理员登录', description: '仅允许 role=9 的账户登录后台' })
   @ApiBody({ type: AdminLoginDto })
   @ApiResponse({ status: 200, description: '登录成功', type: AdminLoginResponseDto })
+  @ApiResponse({ status: 401, description: '登录失败' })
+  @ApiResponse({ status: 403, description: '权限不足或账户被禁用' })
+  @ApiResponse({ status: 429, description: '登录尝试过于频繁' })
+  @Throttle(ThrottlePresets.LOGIN)
   @Post('auth/login')
   @HttpCode(HttpStatus.OK)
   @UsePipes(new ValidationPipe({ transform: true }))
@@ -73,7 +84,9 @@ export class AdminController {
   @ApiParam({ name: 'id', description: '用户ID' })
   @ApiBody({ type: AdminResetPasswordDto })
   @ApiResponse({ status: 200, description: '重置成功', type: AdminCommonResponseDto })
+  @ApiResponse({ status: 429, description: '操作过于频繁' })
   @UseGuards(AdminGuard)
+  @Throttle(ThrottlePresets.ADMIN_OPERATION)
   @Post('users/:id/reset-password')
   @HttpCode(HttpStatus.OK)
   @UsePipes(new ValidationPipe({ transform: true }))