feat: enhance wallet transfer handling and improve HTML safety

- Added emitWalletRefresh function to trigger wallet refresh events after successful transfers and error handling.
- Introduced removeScriptTags function to sanitize HTML content by removing script tags, preventing potential security issues.
- Updated transfer handling logic to ensure wallet refresh is emitted in relevant scenarios, improving user experience.

src/features/wallet/wallet-transfer-forms.tsx

@@ -29,6 +29,12 @@ import { formatWalletClientError } from "@/lib/wallet-api-error";
 import { LotteryApiBizError } from "@/types/api/errors";
 
 /** 处理中 / 待对账：刷新数据后提示用文案即可 */
+function emitWalletRefresh() {
+  if (typeof window !== "undefined") {
+    window.dispatchEvent(new Event("lottery-wallet-refresh"));
+  }
+}
+
 async function handleTransferMaybePending(
   e: unknown,
   onRefresh: () => Promise<void>,
@@ -37,11 +43,13 @@ async function handleTransferMaybePending(
   if (e instanceof LotteryApiBizError && e.code === 1002) {
     toast.message(e.message || t("wallet.pendingToast"));
     await onRefresh();
+    emitWalletRefresh();
     return true;
   }
   if (isAxiosError(e) && e.response?.status === 409) {
     toast.message(t("wallet.pendingShort"));
     await onRefresh();
+    emitWalletRefresh();
     return true;
   }
   return false;
@@ -166,6 +174,7 @@ export function TransferInPanel({
       toast.success(t("wallet.successIn"));
       setAmountText("");
       await onSuccess();
+      emitWalletRefresh();
     } catch (e) {
       if (await handleTransferMaybePending(e, onSuccess, t)) {
         setLocalError(formatWalletClientError(e, t));
@@ -298,6 +307,7 @@ export function TransferOutPanel({
       toast.success(t("wallet.successOut"));
       setAmountText("");
       await onSuccess();
+      emitWalletRefresh();
     } catch (e) {
       if (await handleTransferMaybePending(e, onSuccess, t)) {
         setLocalError(formatWalletClientError(e, t));