feat: 增强代理和玩家管理功能

- 在多个控制器中更新权限检查逻辑，确保管理员能够更灵活地管理代理和玩家。
- 在 AdminPlayerStoreController 中引入对玩家创建能力的验证，确保只有具备相应权限的管理员能够创建玩家。
- 更新请求验证逻辑，新增 credit_limit、rebate_rate 和 extra_rebate_rate 字段，以支持更细粒度的玩家管理。
- 在 AgentNodeProfileController 中添加对父代理能力授予的验证，确保子代理的权限在父代理范围内。
- 引入 AgentProfileFieldRules 以简化代理资料更新请求的规则定义，提升代码复用性。

app/Http/Controllers/Api/V1/Admin/Integration/AdminIntegrationSiteIndexController.php

@@ -6,6 +6,7 @@ use App\Support\ApiResponse;
 use Illuminate\Http\Request;
 use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
+use App\Models\AgentNode;
 use App\Support\AdminIntegrationSiteAccess;
 use App\Support\AdminIntegrationSitePresenter;
 
@@ -16,9 +17,18 @@ final class AdminIntegrationSiteIndexController extends Controller
         $admin = $request->lotteryAdmin();
         abort_if($admin === null, 401);
 
-        $items = AdminIntegrationSiteAccess::queryFor($admin)
-            ->get()
-            ->map(static fn ($site): array => AdminIntegrationSitePresenter::listItem($site))
+        $sites = AdminIntegrationSiteAccess::queryFor($admin)->get();
+        $rootSiteIds = AgentNode::query()
+            ->where('depth', 0)
+            ->whereIn('admin_site_id', $sites->pluck('id'))
+            ->pluck('admin_site_id')
+            ->flip();
+
+        $items = $sites
+            ->map(static fn ($site): array => AdminIntegrationSitePresenter::listItem(
+                $site,
+                isset($rootSiteIds[(int) $site->id]),
+            ))
             ->all();
 
         return ApiResponse::success(['items' => $items]);

app/Http/Controllers/Api/V1/Admin/Integration/AdminIntegrationSiteSecretsController.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\Integration;
+
+use App\Http\Controllers\Controller;
+use App\Http\Middleware\RecordAdminApiAudit;
+use App\Models\AdminSite;
+use App\Lottery\ErrorCode;
+use App\Services\AuditLogger;
+use App\Support\AdminIntegrationSiteAccess;
+use App\Support\ApiMessage;
+use App\Support\ApiResponse;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+/** GET /api/v1/admin/integration-sites/{admin_site}/secrets */
+final class AdminIntegrationSiteSecretsController extends Controller
+{
+    public function __invoke(Request $request, AdminSite $admin_site): JsonResponse
+    {
+        $admin = $request->lotteryAdmin();
+        abort_if($admin === null, 401);
+
+        if (! AdminIntegrationSiteAccess::canAccess($admin, $admin_site)) {
+            return ApiMessage::errorResponse($request, 'admin.site_access_denied', ErrorCode::AdminForbidden->value, null, 403);
+        }
+
+        if (! $admin->isSuperAdmin() && ! $admin->hasPermissionCode('integration.site.manage')) {
+            return ApiMessage::errorResponse($request, 'admin.permission_denied', ErrorCode::AdminForbidden->value, null, 403);
+        }
+
+        $sso = $admin_site->decryptedSsoJwtSecret();
+        $wallet = $admin_site->decryptedWalletApiKey();
+
+        AuditLogger::recordForAdmin(
+            $admin,
+            $request,
+            moduleCode: 'integration',
+            actionCode: 'reveal_secrets',
+            targetType: 'admin_site',
+            targetId: (string) $admin_site->id,
+            afterJson: ['code' => $admin_site->code],
+        );
+        $request->attributes->set(RecordAdminApiAudit::ATTRIBUTE_AUDIT_RECORDED, true);
+
+        return ApiResponse::success([
+            'sso_jwt_secret' => is_string($sso) ? $sso : '',
+            'wallet_api_key' => is_string($wallet) ? $wallet : '',
+        ]);
+    }
+}

app/Http/Controllers/Api/V1/Admin/Integration/AdminIntegrationSiteStoreController.php

@@ -3,7 +3,6 @@
 namespace App\Http\Controllers\Api\V1\Admin\Integration;
 
 use App\Support\ApiResponse;
-use Illuminate\Http\Request;
 use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
 use App\Services\AuditLogger;
@@ -11,8 +10,6 @@ use App\Services\Integration\IntegrationSiteService;
 use App\Support\AdminIntegrationSitePresenter;
 use App\Http\Requests\Admin\AdminIntegrationSiteStoreRequest;
 use App\Http\Middleware\RecordAdminApiAudit;
-use App\Lottery\ErrorCode;
-use App\Support\ApiMessage;
 
 final class AdminIntegrationSiteStoreController extends Controller
 {
@@ -23,19 +20,6 @@ final class AdminIntegrationSiteStoreController extends Controller
         $admin = $request->lotteryAdmin();
         abort_if($admin === null, 401);
 
-        if (! $admin->isSuperAdmin()) {
-            return ApiMessage::errorResponse(
-                $request,
-                'admin.integration_site_store_deprecated',
-                ErrorCode::AdminForbidden->value,
-                ['hint' => 'Use POST /api/v1/admin/agent-lines to provision a new agent line.'],
-                403,
-            )->withHeaders([
-                'Deprecation' => 'true',
-                'Link' => '</api/v1/admin/agent-lines>; rel="successor-version"',
-            ]);
-        }
-
         $result = $service->create($request->validated());
         $site = $result['site'];