feat: add models for physical files, policies, and user management

- Implement PhysicalFile model to manage physical file references and reference counting.
- Create Policy model with associated options and group links for storage policies.
- Introduce Redeem and Report models for handling redeem codes and reports.
- Add Settings model for site configuration and user settings management.
- Develop Share model for sharing objects with unique codes and associated metadata.
- Implement SourceLink model for managing download links associated with objects.
- Create StoragePack model for managing user storage packages.
- Add Tag model for user-defined tags with manual and automatic types.
- Implement Task model for managing background tasks with status tracking.
- Develop User model with comprehensive user management features including authentication.
- Introduce UserAuthn model for managing WebAuthn credentials.
- Create WebDAV model for managing WebDAV accounts associated with users.

tests/integration/middleware/test_auth.py

@@ -83,7 +83,7 @@ async def test_auth_required_token_without_sub(async_client: AsyncClient):
 async def test_auth_required_nonexistent_user_token(async_client: AsyncClient):
     """测试用户不存在的token返回 401"""
     token, _ = JWT.create_access_token(
-        data={"sub": "nonexistent_user"},
+        data={"sub": "nonexistent_user@test.local"},
         expires_delta=timedelta(hours=1)
     )
 
@@ -178,12 +178,12 @@ async def test_auth_on_directory_endpoint(
 ):
     """测试目录端点应用认证"""
     # 无认证
-    response_no_auth = await async_client.get("/api/directory/testuser")
+    response_no_auth = await async_client.get("/api/directory/")
     assert response_no_auth.status_code == 401
 
     # 有认证
     response_with_auth = await async_client.get(
-        "/api/directory/testuser",
+        "/api/directory/",
         headers=auth_headers
     )
     assert response_with_auth.status_code == 200
@@ -235,7 +235,7 @@ async def test_auth_on_storage_endpoint(
 async def test_refresh_token_format(test_user_info: dict[str, str]):
     """测试刷新token格式正确"""
     refresh_token, _ = JWT.create_refresh_token(
-        data={"sub": test_user_info["username"]},
+        data={"sub": test_user_info["email"]},
         expires_delta=timedelta(days=7)
     )
 
@@ -247,7 +247,7 @@ async def test_refresh_token_format(test_user_info: dict[str, str]):
 async def test_access_token_format(test_user_info: dict[str, str]):
     """测试访问token格式正确"""
     access_token, expires = JWT.create_access_token(
-        data={"sub": test_user_info["username"]},
+        data={"sub": test_user_info["email"]},
         expires_delta=timedelta(hours=1)
     )