feat: enhance agent management and validation logic

- Updated AGENTS.md to clarify agent account restrictions and permissions.
- Implemented checks in AgentNodeAdminUserStoreController and AgentNodeRoleStoreController to restrict admin user and role creation to the agent's own node.
- Enhanced validation in AdminPlayerStoreController and AdminPlayerUpdateController to enforce credit limit and rebate rate rules based on player funding mode.
- Refactored various request classes to utilize shared admin account field rules for consistency.
- Improved error handling in services related to credit allocation and rebate limits to ensure proper validation and messaging.

app/Http/Requests/Admin/AdminPlayerUpdateRequest.php

@@ -3,6 +3,7 @@
 namespace App\Http\Requests\Admin;
 
 use Illuminate\Validation\Rule;
+use App\Http\Requests\Admin\Concerns\AdminAccountFieldRules;
 use App\Http\Requests\ApiFormRequest;
 
 /**
@@ -12,6 +13,8 @@ use App\Http\Requests\ApiFormRequest;
  */
 final class AdminPlayerUpdateRequest extends ApiFormRequest
 {
+    use AdminAccountFieldRules;
+
     public function authorize(): bool
     {
         return true;
@@ -20,11 +23,11 @@ final class AdminPlayerUpdateRequest extends ApiFormRequest
     public function rules(): array
     {
         return [
-            'username' => ['sometimes', 'string', 'max:128'],
+            'username' => $this->nativePlayerUsernameRules(required: false),
             'nickname' => ['sometimes', 'nullable', 'string', 'max:128'],
             'default_currency' => ['sometimes', 'string', 'max:16', Rule::exists('currencies', 'code')],
             'status' => ['sometimes', 'integer', Rule::in([0, 1, 2])],
-            'credit_limit' => ['sometimes', 'integer', 'min:0'],
+            'credit_limit' => ['sometimes', 'integer', 'min:0', 'max:999999999'],
             'rebate_rate' => ['sometimes', 'numeric', 'min:0', 'max:100'],
             'extra_rebate_rate' => ['sometimes', 'numeric', 'min:0', 'max:100'],
             'rebate_profiles' => ['sometimes', 'array'],
@@ -39,6 +42,8 @@ final class AdminPlayerUpdateRequest extends ApiFormRequest
 
     protected function prepareForValidation(): void
     {
+        $this->normalizeAdminAccountFields();
+
         if (! $this->has('default_currency')) {
             return;
         }