feat: enhance player authentication and agent management features

- Updated AGENTS.md to clarify player interface bindings and agent account restrictions.
- Improved PlayerAuthLoginController to include captcha verification for player login.
- Enhanced AdminPlayerIndexController with permission checks for admin users.
- Refactored AdminPlayerStoreController to enforce agent node restrictions for non-super admins.
- Introduced new error codes for player authentication failures and updated related services.
- Enhanced validation rules for agent profiles to include settlement cycle options.
- Improved AdminCaptchaService to support separate scopes for admin and player captcha handling.
- Updated various services to ensure proper credit management and settlement processes.

routes/api/v1/public.php

@@ -9,6 +9,7 @@ use App\Http\Controllers\Api\V1\Currency\CurrencyIndexController;
 use App\Http\Controllers\Api\V1\Jackpot\JackpotSummaryController;
 use App\Http\Controllers\Api\V1\Play\PlayEffectiveCatalogController;
 use App\Http\Controllers\Api\V1\Player\PingController as PlayerPingController;
+use App\Http\Controllers\Api\V1\Player\PlayerAuthCaptchaController;
 use App\Http\Controllers\Api\V1\Player\PlayerAuthLoginController;
 use App\Http\Controllers\Api\V1\Setting\SettingIndexController;
 use App\Http\Controllers\Api\V1\Integration\IntegrationRuntimeOriginsController;
@@ -41,7 +42,12 @@ Route::prefix('player')
     ->name('api.v1.player.')
     ->group(function (): void {
         Route::get('ping', PlayerPingController::class)->name('ping');
-        Route::post('auth/login', PlayerAuthLoginController::class)->name('auth.login');
+        Route::middleware('throttle:player-auth-captcha')
+            ->get('auth/captcha', PlayerAuthCaptchaController::class)
+            ->name('auth.captcha');
+        Route::middleware('throttle:player-auth-login')
+            ->post('auth/login', PlayerAuthLoginController::class)
+            ->name('auth.login');
     });
 
 // 系统公共配置（如前端规则等）