feat: 添加用户注册登录功能，实现数据和配置的用户隔离

- 新增 users 和 user_settings 表，repositories/analyses/review_notes 添加 user_id 列
- 实现基于邮箱+密码的注册登录，密码使用 bcrypt 哈希
- 使用 gin-contrib/sessions cookie-based session 管理
- 所有仓库、分析记录、review notes 按用户隔离
- 用户设置（LLM 配置、review 参数、缓存配置）独立存储
- 新增登录/注册页面，导航栏显示用户邮箱和退出按钮
- 前端 fetch 请求统一添加 credentials: 'same-origin'
- 支持 SESSION_SECRET 环境变量配置会话密钥

handlers/pages.go

@@ -17,59 +17,85 @@ func NewPageHandler(db *sql.DB) *PageHandler {
 	return &PageHandler{db: db}
 }
 
+// userData returns a gin.H with the current user info for template rendering.
+func userData(c *gin.Context) gin.H {
+	user := GetCurrentUser(c)
+	if user == nil {
+		return gin.H{}
+	}
+	return gin.H{"User": user}
+}
+
 func (h *PageHandler) Index(c *gin.Context) {
-	repos, _ := h.listRepos()
-	c.HTML(http.StatusOK, "pages/index.html", gin.H{
-		"Repos": repos,
-	})
+	user := GetCurrentUser(c)
+	if user == nil {
+		c.Redirect(http.StatusFound, "/login")
+		return
+	}
+	repos, _ := h.listRepos(user.ID)
+	data := userData(c)
+	data["Repos"] = repos
+	c.HTML(http.StatusOK, "pages/index.html", data)
 }
 
 func (h *PageHandler) Repo(c *gin.Context) {
-	c.HTML(http.StatusOK, "pages/repo.html", gin.H{
-		"ID": c.Param("id"),
-	})
+	data := userData(c)
+	data["ID"] = c.Param("id")
+	c.HTML(http.StatusOK, "pages/repo.html", data)
 }
 
 func (h *PageHandler) Generate(c *gin.Context) {
-	c.HTML(http.StatusOK, "pages/generate.html", gin.H{
-		"ID": c.Param("id"),
-	})
+	data := userData(c)
+	data["ID"] = c.Param("id")
+	c.HTML(http.StatusOK, "pages/generate.html", data)
 }
 
 func (h *PageHandler) Review(c *gin.Context) {
+	user := GetCurrentUser(c)
 	topN := "20"
-	h.db.QueryRow(`SELECT value FROM settings WHERE key = 'review.top_n'`).Scan(&topN)
 	concurrency := "5"
-	h.db.QueryRow(`SELECT value FROM settings WHERE key = 'review.concurrency'`).Scan(&concurrency)
-	c.HTML(http.StatusOK, "pages/review.html", gin.H{
-		"ID":          c.Param("id"),
-		"TopN":        topN,
-		"Concurrency": concurrency,
-	})
+	if user != nil {
+		h.db.QueryRow(`SELECT value FROM user_settings WHERE user_id = ? AND key = 'review.top_n'`, user.ID).Scan(&topN)
+		h.db.QueryRow(`SELECT value FROM user_settings WHERE user_id = ? AND key = 'review.concurrency'`, user.ID).Scan(&concurrency)
+	}
+	if topN == "" {
+		topN = "20"
+	}
+	if concurrency == "" {
+		concurrency = "5"
+	}
+	data := userData(c)
+	data["ID"] = c.Param("id")
+	data["TopN"] = topN
+	data["Concurrency"] = concurrency
+	c.HTML(http.StatusOK, "pages/review.html", data)
 }
 
 func (h *PageHandler) Settings(c *gin.Context) {
+	user := GetCurrentUser(c)
 	settings := make(map[string]string)
 	for key := range models.DefaultSettings {
 		settings[key] = ""
 	}
-	rows, err := h.db.Query(`SELECT key, value FROM settings`)
-	if err == nil {
-		defer rows.Close()
-		for rows.Next() {
-			var k, v string
-			if rows.Scan(&k, &v) == nil {
-				settings[k] = v
+	if user != nil {
+		rows, err := h.db.Query(`SELECT key, value FROM user_settings WHERE user_id = ?`, user.ID)
+		if err == nil {
+			defer rows.Close()
+			for rows.Next() {
+				var k, v string
+				if rows.Scan(&k, &v) == nil {
+					settings[k] = v
+				}
 			}
 		}
 	}
-	c.HTML(http.StatusOK, "pages/settings.html", gin.H{
-		"Settings": settings,
-	})
+	data := userData(c)
+	data["Settings"] = settings
+	c.HTML(http.StatusOK, "pages/settings.html", data)
 }
 
-func (h *PageHandler) listRepos() ([]models.Repository, error) {
-	rows, err := h.db.Query(`SELECT id, url, local_path, size_bytes, cloned_at, last_used FROM repositories ORDER BY last_used DESC`)
+func (h *PageHandler) listRepos(userID int64) ([]models.Repository, error) {
+	rows, err := h.db.Query(`SELECT id, url, local_path, size_bytes, cloned_at, last_used FROM repositories WHERE user_id = ? ORDER BY last_used DESC`, userID)
 	if err != nil {
 		return nil, err
 	}