feat(admin): 增加玩家密码管理与角色边界

app/Http/Controllers/Api/V1/Admin/Player/AdminPlayerPasswordResetController.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\Player;
+
+use App\Models\Player;
+use App\Support\ApiResponse;
+use App\Support\AdminSiteScope;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Player\PlayerPasswordService;
+use App\Http\Requests\Admin\AdminPlayerPasswordResetRequest;
+
+/** PUT /api/v1/admin/players/{player}/password */
+final class AdminPlayerPasswordResetController extends Controller
+{
+    public function __invoke(
+        AdminPlayerPasswordResetRequest $request,
+        Player $player,
+        PlayerPasswordService $passwords,
+    ): JsonResponse {
+        $admin = $request->lotteryAdmin();
+        abort_if($admin === null, 401);
+
+        if ($denied = AdminSiteScope::denyUnlessPlayerAccessible($admin, $player)) {
+            return $denied;
+        }
+
+        $updated = $passwords->reset($player, (string) $request->validated('password'));
+
+        return ApiResponse::success([
+            'password_reset' => true,
+            'player_id' => (int) $updated->id,
+        ], request: $request);
+    }
+}