style(copy): fix remaining punctuation violations and make check:copy strict

Auto-fix of 602 string literals across 74 files (half-width punctuation next to
Chinese, parenthesised Chinese, quotes); biome reflow; e2/e6 assertions follow
the new full-width summaries. check:copy now runs with --strict in ci.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/src/modules/auth-settings/auth-service.ts

@@ -82,7 +82,7 @@ export async function ensureSetupToken(deps: Pick<AuthDeps, "db" | "logger">): P
     returning id`.execute(deps.db);
   if (!r.rows.length) return null;
   // 注意:logger 会把名为 *token* 的字段脱敏,所以 token 放在消息文本里
-  deps.logger.warn(`管理员尚未初始化。一次性 setup token(打开控制台登录页完成初始化;重启会重新生成):${token}`);
+  deps.logger.warn(`管理员尚未初始化。一次性 setup token（打开控制台登录页完成初始化；重启会重新生成）：${token}`);
   return token;
 }
 
@@ -104,7 +104,7 @@ async function recentFailures(db: Kysely<DB>, col: "ip" | "username", value: str
 export async function assertNotRateLimited(db: Kysely<DB>, ip: string, username: string): Promise<void> {
   const [byIp, byAccount] = await Promise.all([recentFailures(db, "ip", ip), recentFailures(db, "username", username)]);
   if (byIp >= MAX_FAILURES_PER_IP || byAccount >= MAX_FAILURES_PER_ACCOUNT) {
-    throw new ApiException("rate_limited", "失败次数过多,15 分钟后再试");
+    throw new ApiException("rate_limited", "失败次数过多，15 分钟后再试");
   }
 }
 
@@ -363,7 +363,7 @@ function otpauthUri(secret: string, account: string): string {
 }
 
 export async function totpBegin(deps: AuthDeps, admin: AdminRow): Promise<TotpSetupInfo> {
-  if (admin.totp_enabled_at) throw new ApiException("conflict", "TOTP 已启用,先停用再重新绑定");
+  if (admin.totp_enabled_at) throw new ApiException("conflict", "TOTP 已启用，先停用再重新绑定");
   const secret = base32Encode(randomBytes(20));
   const ref = await deps.secrets.create({ purpose: "other", plaintext: secret, label: `admin-totp:${randomToken(6)}` });
   const old = admin.totp_pending_secret_ref;
@@ -375,7 +375,7 @@ export async function totpBegin(deps: AuthDeps, admin: AdminRow): Promise<TotpSe
 
 /** GET /auth/totp/setup:已有未确认的密钥就原样返回(刷新页面不作废已扫的码),没有才生成 */
 export async function totpSetup(deps: AuthDeps, admin: AdminRow): Promise<TotpSetupInfo> {
-  if (admin.totp_enabled_at) throw new ApiException("conflict", "TOTP 已启用,先停用再重新绑定");
+  if (admin.totp_enabled_at) throw new ApiException("conflict", "TOTP 已启用，先停用再重新绑定");
   if (admin.totp_pending_secret_ref) {
     try {
       const secret = await deps.secrets.resolve(admin.totp_pending_secret_ref);