feat(admin,api,player): 结算预览分页、统计图表与返水限额

完善结算计算与预览 API（含后端分页），加强管理端结算/返水/权限，并优化玩家端投注单与队徽展示。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/src/domains/identity/guards.ts

@@ -33,14 +33,20 @@ export class PermissionsGuard implements CanActivate {
       context.getHandler(),
       context.getClass(),
     ]);
-    if (!required?.length) return true;
 
     const { user } = context.switchToHttp().getRequest();
-    const userPerms: string[] = user?.permissions ?? [];
-    if (user?.role === 'SUPER_ADMIN') return true;
+    if (!user || user.userType !== 'ADMIN') {
+      throw new ForbiddenException('Admin access required');
+    }
+    if (user.role === 'SUPER_ADMIN') return true;
 
-    const hasAll = required.every((p) => userPerms.includes(p));
-    if (!hasAll) throw new ForbiddenException('Insufficient permissions');
+    if (!required?.length) {
+      throw new ForbiddenException('Insufficient permissions');
+    }
+
+    const userPerms: string[] = user.permissions ?? [];
+    const hasAccess = required.some((p) => userPerms.includes(p));
+    if (!hasAccess) throw new ForbiddenException('Insufficient permissions');
     return true;
   }
 }