修复认证挑战与可信代理安全边界（07-17-auth-challenge-trusted-proxy-hardening）

server/src/app.js

@@ -124,7 +124,7 @@ async function buildApp(dependencies = {}) {
         censor: "[REDACTED]",
       },
     },
-    trustProxy: true,
+    trustProxy: config.trustProxy,
     genReqId: () => crypto.randomUUID(),
   });
 
@@ -336,7 +336,10 @@ async function buildApp(dependencies = {}) {
     app.log.info("Metrics endpoint enabled at /metrics");
   }
 
-  await app.register(authRoutes, { prefix: "/api/auth" });
+  await app.register(authRoutes, {
+    prefix: "/api/auth",
+    emailService: dependencies.authEmailService,
+  });
   await app.register(wecomAuthRoutes, { prefix: "/api/auth" });
   await app.register(wecomApprovalArchiveRoutes, { prefix: "/api" });
   await app.register(wecomApprovalCallbackRoutes, { prefix: "/api" });