feat: enhance player authentication and agent management features

- Updated AGENTS.md to clarify player interface bindings and agent account restrictions.
- Improved PlayerAuthLoginController to include captcha verification for player login.
- Enhanced AdminPlayerIndexController with permission checks for admin users.
- Refactored AdminPlayerStoreController to enforce agent node restrictions for non-super admins.
- Introduced new error codes for player authentication failures and updated related services.
- Enhanced validation rules for agent profiles to include settlement cycle options.
- Improved AdminCaptchaService to support separate scopes for admin and player captcha handling.
- Updated various services to ensure proper credit management and settlement processes.

app/Support/AdminDataScope.php

@@ -43,20 +43,13 @@ final class AdminDataScope
             $query->whereIn($alias.'.site_code', $codes);
         }
 
-        // Check if admin is a platform account (bound via admin_user_site_roles)
-        $accessibleSiteIds = $admin->accessibleAdminSiteIds();
-        if ($accessibleSiteIds !== null) {
-            // Platform account (site admin) - no agent node filtering needed
-            if ($requestedAgentNodeId !== null && $requestedAgentNodeId > 0) {
-                self::applyAgentNodeIdOnAlias($query, $admin, $alias, $requestedAgentNodeId);
-            }
-            return;
-        }
-
-        // Agent account (bound via agent node)
         $actor = AdminAgentScope::primaryAgentNode($admin);
         if ($actor === null) {
-            $query->whereRaw('0 = 1');
+            if (! AdminAgentScope::isSiteOnlyOperator($admin)) {
+                $query->whereRaw('0 = 1');
+            } elseif ($requestedAgentNodeId !== null && $requestedAgentNodeId > 0) {
+                self::applyAgentNodeIdOnAlias($query, $admin, $alias, $requestedAgentNodeId);
+            }
 
             return;
         }