refactor：拆分 API 路由与请求校验，统一 final 类和代码风格

app/Http/Middleware/EnsurePlayerApi.php

@@ -2,14 +2,14 @@
 
 namespace App\Http\Middleware;
 
-use App\Exceptions\PlayerAuthenticationException;
-use App\Lottery\ErrorCode;
-use App\Services\PlayerTokenResolver;
-use App\Support\ApiResponse;
-use App\Support\LotteryMessage;
 use Closure;
+use App\Lottery\ErrorCode;
+use App\Support\ApiResponse;
 use Illuminate\Http\Request;
+use App\Support\LotteryMessage;
+use App\Services\PlayerTokenResolver;
 use Symfony\Component\HttpFoundation\Response;
+use App\Exceptions\PlayerAuthenticationException;
 
 /**
  * 【玩家端 API 鉴权中间件】
@@ -20,7 +20,7 @@ use Symfony\Component\HttpFoundation\Response;
  *
  * PlayerAuthenticationException 的 getMessage() 仅作开发与日志用语，可与 API msg 语种不一致。
  */
-class EnsurePlayerApi
+final class EnsurePlayerApi
 {
     public function handle(Request $request, Closure $next): Response
     {