feat(ECR-012–016): 合规、题库、时辰刷新、头像、MBTI OEJTS 与埋点

落地输入合规、探索题库、报告日/时辰刷新、账号头像、OEJTS 量表，并补齐 H5 埋点与 Admin 漏斗；同步 ESS 工件、切至自建 Git、清理 GitHub Actions。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/handler/growth.go

@@ -2,7 +2,6 @@ package handler
 
 import (
 	"net/http"
-	"strings"
 	"time"
 
 	"github.com/gin-gonic/gin"
@@ -10,6 +9,7 @@ import (
 
 	"github.com/yuxingu/digital-psychology/apps/api/internal/middleware"
 	"github.com/yuxingu/digital-psychology/apps/api/internal/repository"
+	"github.com/yuxingu/digital-psychology/apps/api/internal/textsafe"
 	"github.com/yuxingu/digital-psychology/apps/api/pkg/response"
 )
 
@@ -57,12 +57,17 @@ func (h *GrowthHandler) CreatePlan(c *gin.Context) {
 		response.Fail(c, http.StatusBadRequest, 10000, "invalid request")
 		return
 	}
-	title := strings.TrimSpace(req.Title)
-	if title == "" || len([]rune(title)) > 40 {
-		response.Fail(c, http.StatusBadRequest, 10000, "invalid title")
+	title, err := textsafe.Check(textsafe.Title, req.Title)
+	if err != nil {
+		_ = failTextCompliance(c, err)
 		return
 	}
-	p, err := h.Plans.CreatePlan(c.Request.Context(), userID, title, strings.TrimSpace(req.Focus))
+	focus, err := textsafe.Check(textsafe.Focus, req.Focus)
+	if err != nil {
+		_ = failTextCompliance(c, err)
+		return
+	}
+	p, err := h.Plans.CreatePlan(c.Request.Context(), userID, title, focus)
 	if err != nil {
 		response.Fail(c, http.StatusBadRequest, 30020, err.Error())
 		return
@@ -86,6 +91,18 @@ func (h *GrowthHandler) Checkin(c *gin.Context) {
 		Note *string `json:"note"`
 	}
 	_ = c.ShouldBindJSON(&req)
+	if req.Note != nil {
+		n, err := textsafe.Check(textsafe.Note, *req.Note)
+		if err != nil {
+			_ = failTextCompliance(c, err)
+			return
+		}
+		if n == "" {
+			req.Note = nil
+		} else {
+			req.Note = &n
+		}
+	}
 	out, err := h.Plans.Checkin(c.Request.Context(), userID, pid, time.Now(), req.Note)
 	if err != nil {
 		response.Fail(c, http.StatusBadRequest, 30021, err.Error())