feat: 增强代理和玩家管理功能

- 在多个控制器中更新权限检查逻辑，确保管理员能够更灵活地管理代理和玩家。
- 在 AdminPlayerStoreController 中引入对玩家创建能力的验证，确保只有具备相应权限的管理员能够创建玩家。
- 更新请求验证逻辑，新增 credit_limit、rebate_rate 和 extra_rebate_rate 字段，以支持更细粒度的玩家管理。
- 在 AgentNodeProfileController 中添加对父代理能力授予的验证，确保子代理的权限在父代理范围内。
- 引入 AgentProfileFieldRules 以简化代理资料更新请求的规则定义，提升代码复用性。

lang/en/admin.php

@@ -20,6 +20,9 @@ return [
     'player_wallet_balance_blocks_delete' => 'Player wallet still has balance. Clear it before deletion.',
     'player_has_tickets_blocks_delete' => 'Player has ticket records and cannot be deleted.',
     'role_cannot_delete_super_admin' => 'Cannot delete the super admin role.',
+    'platform_roles_fixed' => 'Only the built-in Super Admin and Agent platform roles are supported; creating new roles is disabled.',
+    'role_super_admin_permissions_fixed' => 'Super Admin always has full permissions. Run lottery:admin-auth-sync after the permission catalog changes.',
+    'role_super_admin_metadata_fixed' => 'Super Admin is a built-in role; name and status cannot be changed.',
     'role_builtin_cannot_delete' => 'Built-in roles cannot be deleted.',
     'role_has_users_cannot_delete' => 'This role still has assigned admins and cannot be deleted.',
     'agent_root_delete_denied' => 'Root agent nodes cannot be deleted.',