feat(agent-profile): 限制代理及玩家返点和分成范围，增强权限校验

- 添加ensureSuperAdmin方法，限制管理员设置操作权限
- 在AdminSettingController接口中新增权限检查，防止非超级管理员操作
- AdminPlayerIndexController新增direct agent筛选支持
- AdminPlayerUpdateController新增对信用玩家默认币别变更的拒绝逻辑
- 新增WalletSettlementBillsController，实现玩家信用盘账期账单摘要接口
- AgentProfileService调整，新增返点限额和分享比例自动下调机制，保持子代理及玩家配置不超父级
- AgentProfileService增加can_grant_extra_rebate权限继承限制，阻止无权限代理开启
- AgentSettlementPeriodCloseService增加玩家账单回水信用释放逻辑，确保信用额度同步
- PlayerCreditService新增释放账单回水对应信用逻辑，维护账期信用一致性
- TicketPlacementService和TicketPreviewService新增信用玩家投注币别匹配校验，防止币别不符
- PlayerLedgerLogsService优化信用额度计算，增加可用额度上下限限制，防止负值和超限
- 调整后台管理导航，仅超管可见设置入口，强化权限隔离
- 路由新增玩家信用账单查询接口
- 补充多项AgentProfile相关单元测试覆盖额度限制、返点继承、返点下调场景及权限限制
- 增加站点管理员登录测试，验证系统设置菜单不可见，提升用户权限体验

tests/Feature/CreditWalletLogsTest.php

@@ -141,6 +141,72 @@ test('credit player wallet logs distinguish win credit from bill settlement', fu
         ->assertJsonPath('data.items.0.type', 'game_settlement');
 });
 
+test('credit wallet logs cap available credit after win above credit limit', function (): void {
+    $player = Player::query()->create([
+        'site_code' => 'default_site',
+        'site_player_id' => 'native:logs-win-cap',
+        'auth_source' => PlayerAuthSource::LOTTERY_NATIVE,
+        'funding_mode' => PlayerFundingMode::CREDIT,
+        'username' => 'credit_logs_win_cap',
+        'default_currency' => 'NPR',
+        'status' => 0,
+    ]);
+
+    DB::table('player_credit_accounts')->insert([
+        'player_id' => $player->id,
+        'credit_limit' => 200,
+        'used_credit' => 0,
+        'frozen_credit' => 0,
+        'created_at' => now(),
+        'updated_at' => now(),
+    ]);
+
+    DB::table('credit_ledger')->insert([
+        [
+            'owner_type' => 'player',
+            'owner_id' => $player->id,
+            'amount' => -5000,
+            'reason' => 'bet_hold',
+            'ref_type' => 'bet',
+            'ref_id' => 1,
+            'created_at' => now()->subMinutes(2),
+            'updated_at' => now()->subMinutes(2),
+        ],
+        [
+            'owner_type' => 'player',
+            'owner_id' => $player->id,
+            'amount' => 5000,
+            'reason' => 'bet_hold_release',
+            'ref_type' => 'ticket_item',
+            'ref_id' => 1,
+            'created_at' => now()->subMinute(),
+            'updated_at' => now()->subMinute(),
+        ],
+        [
+            'owner_type' => 'player',
+            'owner_id' => $player->id,
+            'amount' => 50000,
+            'reason' => 'game_settlement_win',
+            'ref_type' => 'ticket_item',
+            'ref_id' => 1,
+            'created_at' => now(),
+            'updated_at' => now(),
+        ],
+    ]);
+
+    $data = $this->withHeader('Authorization', 'Bearer dev:'.$player->id)
+        ->getJson('/api/v1/wallet/logs?page=1&size=10')
+        ->assertOk()
+        ->json('data');
+
+    expect($data['items'][0]['biz_type'])->toBe('game_settlement_win')
+        ->and($data['items'][0]['balance_after'])->toBe(20000)
+        ->and($data['items'][1]['biz_type'])->toBe('bet_hold_release')
+        ->and($data['items'][1]['balance_after'])->toBe(0)
+        ->and($data['items'][2]['biz_type'])->toBe('bet_hold')
+        ->and($data['items'][2]['balance_after'])->toBe(0);
+});
+
 test('credit player wallet logs include period rebate records without affecting available credit', function (): void {
     $player = Player::query()->create([
         'site_code' => 'default_site',
@@ -276,6 +342,6 @@ test('credit wallet logs page 2 balance_after continues from page 1 baseline', f
     $page1LastBalanceAfter = $page1['items'][9]['balance_after'];
     $page2FirstBalanceAfter = $page2['items'][0]['balance_after'];
 
-    // Page 2 must continue the running balance from page 1, not restart at current available.
-    expect($page2FirstBalanceAfter)->toBe($page1LastBalanceAfter + 1000);
+    // Page 2 must continue the running balance from page 1, capped by credit limit.
+    expect($page2FirstBalanceAfter)->toBe(min($page1LastBalanceAfter + 1000, 50000));
 });