feat: 平台认证（scrypt上移/内存token 8h/登录限流/改密/角色依赖/409语义）

Co-Authored-By: Claude Code <noreply@anthropic.com>

app/main.py

@@ -80,9 +80,15 @@ app = FastAPI(title="HESUPIPE AI 客服", lifespan=lifespan)
 from app.engine.routes.chat import router as chat_router
 from app.engine.routes.chat_rest import router as chat_rest_router
 from app.engine.routes.public import router as public_router
+from app.platform.routes.auth_routes import router as platform_auth_router
 app.include_router(chat_router)
 app.include_router(chat_rest_router)
 app.include_router(public_router)
+# 平台认证路由(Task 2):本任务即挂——已知租户 Host(如 jiancai)下
+# /api/platform/auth/* 经 Host 中间件直达,TDD 循环闭环。Task 3 将为
+# /api/platform/ 前缀加中间件豁免(平台后台不依赖租户域名解析);
+# 豁免≠放行——认证由路由依赖(get_current_user 系)守护。
+app.include_router(platform_auth_router)
 
 app.mount("/static", StaticFiles(directory=str(STATIC_DIR)), name="static")