fix(typesafe): 补齐平台迁移、审计覆盖、端点隔离与错误策略

- 新增 241 迁移：user_platform_quotas / composite_model_routes 的 CHECK 约束
  加入 typesafe。此前设置 typesafe 默认配额会让注册时的多行配额快照整体
  违约（fail-open 后新用户所有平台配额丢失），单用户配额与 Composite 路由保存 500。
- Prompt 审计新增 typesafe_systemone 协议提取（state + 各问题 instructions/
  criteria/选项标签，键排序保证哈希稳定）；此前提取为空，阻断与异步审计均被放行。
  旧内容审核同样覆盖问题文本，且不再丢弃含 <system-reminder> 的 System One 文本。
- TypeSafe 分组及路由到 TypeSafe 的 Composite 请求访问 Messages / count_tokens /
  Chat Completions / Responses 时返回 404，避免以 x-api-key 打到错误上游路径并
  污染账号状态；TypeSafe 账号 base_url 为空时不再回退 api.anthropic.com。
- SystemOne 补在途余额预留、利润控制准入终检、wrapReleaseOnDone，失败切换改用
  共享 FailoverState（同账号重试 / 池模式 / 临时封禁）。
- 上游错误沿用共享账号错误策略：402/403、自定义错误码、临时不可调度规则生效，
  记录 ops 上游错误；400/422 仍不切换且永不改变账号状态。
- 账号测试改走原生 System One 探测，可用模型只返回 jev-latest；
  响应超限显式报错，响应 Content-Type 仅透传 JSON 类型。

README.md

@@ -848,7 +848,7 @@ curl https://your-sub2api.example.com/v1/systemone \
   --data '{"model":"jev-latest","state":"Text to evaluate","questions":{"safety":{"type":"noul","instructions":"Evaluate whether the text is unsafe"}}}'
 ```
 
-The built-in `jev-latest` price is `$0.042` per million input tokens and `$0` for output tokens. Channel pricing can override both values. Credential, rate-limit, overload, server, and network failures use the existing account cooldown and failover path; request errors (`400` and `422`) are returned without retrying another account.
+The built-in `jev-latest` price is `$0.042` per million input tokens and `$0` for output tokens. Channel pricing can override both values. Credential, billing, permission, rate-limit, overload, server, and network failures (`401`, `402`, `403`, `429`, `529`, `5xx`, transport errors) use the existing account error policy (including custom error codes and temporary-unschedulable rules) and fail over to another account; request errors (`400` and `422`) are returned without retrying another account and never change account state. TypeSafe groups (and Composite requests routed to TypeSafe) reject Messages, Chat Completions, Responses, and count_tokens requests with `404`.
 
 ---