feat: enhance agent management and validation logic

- Updated AGENTS.md to clarify agent account restrictions and permissions.
- Implemented checks in AgentNodeAdminUserStoreController and AgentNodeRoleStoreController to restrict admin user and role creation to the agent's own node.
- Enhanced validation in AdminPlayerStoreController and AdminPlayerUpdateController to enforce credit limit and rebate rate rules based on player funding mode.
- Refactored various request classes to utilize shared admin account field rules for consistency.
- Improved error handling in services related to credit allocation and rebate limits to ensure proper validation and messaging.

app/Http/Requests/Player/PlayerAuthLoginRequest.php

@@ -2,21 +2,32 @@
 
 namespace App\Http\Requests\Player;
 
+use App\Http\Requests\Admin\Concerns\AdminAccountFieldRules;
 use App\Http\Requests\ApiFormRequest;
 
 final class PlayerAuthLoginRequest extends ApiFormRequest
 {
+    use AdminAccountFieldRules;
+
     public function authorize(): bool
     {
         return true;
     }
 
+    protected function prepareForValidation(): void
+    {
+        $this->normalizeAdminAccountFields();
+        if ($this->has('username')) {
+            $this->merge(['username' => strtolower(trim((string) $this->input('username')))]);
+        }
+    }
+
     public function rules(): array
     {
         return [
             'site_code' => ['sometimes', 'nullable', 'string', 'max:64'],
-            'username' => ['required', 'string', 'max:128'],
-            'password' => ['required', 'string', 'min:6', 'max:128'],
+            'username' => $this->nativePlayerUsernameRules(required: true),
+            'password' => $this->nativePlayerPasswordRules(required: true),
         ];
     }
 }