refactor：拆分 API 路由与请求校验，统一 final 类和代码风格

app/Http/Middleware/EnsureAdminApi.php

@@ -2,10 +2,10 @@
 
 namespace App\Http\Middleware;
 
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
-use App\Support\ApiResponse;
 use Closure;
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
+use App\Support\ApiResponse;
 use Illuminate\Http\Request;
 use Symfony\Component\HttpFoundation\Response;
 
@@ -13,7 +13,7 @@ use Symfony\Component\HttpFoundation\Response;
  * 后台 API：`auth:sanctum` 之后执行，校验为 {@link AdminUser} 且未禁用；
  * 上下文可通过 `$request->lotteryAdmin()` 读取。
  */
-class EnsureAdminApi
+final class EnsureAdminApi
 {
     public function handle(Request $request, Closure $next): Response
     {