CloudFlare-ImgBed v2.6.5

• 认证系统安全加固：密码使用 SHA-256 + 盐值哈希存储，兼容已有明文密码
• 会话管理改为 HttpOnly Cookie（admin_session / user_session），不再在前端存储密码
• 前端不再将密码/凭证存储到 localStorage 或 Cookie 中
• 管理端和用户端使用独立的会话 Cookie，互不影响
• 修改密码后自动清除对应类型的所有会话
• 安全设置页面不再向前端返回密码/哈希值
• 新增"清除密码"功能，支持移除已设置的认证
• 新增 /api/auth/resetAuth 接口，忘记密码时可通过 RESET_KEY 环境变量重置认证
• 鉴权相关接口统一迁移至 /api/auth/ 子目录

• Auth system hardening: passwords now stored with SHA-256 + salt hashing, backward compatible with existing plaintext passwords
• Session management switched to HttpOnly Cookies (admin_session / user_session), passwords no longer stored on the client side
• Frontend no longer stores passwords/credentials in localStorage or Cookies
• Admin and user sessions use independent cookies, fully isolated
• Changing a password automatically clears all sessions of the corresponding type
• Security settings page no longer exposes password/hash values to the frontend
• Added "Clear Password" feature to remove existing authentication
• Added /api/auth/resetAuth endpoint for password recovery via RESET_KEY environment variable
• Auth-related endpoints moved to /api/auth/ subdirectory