完善论坛配置与发帖体验：TipTap 富文本、图片上传、修订历史、Feed 排序与后台参数管理。

同步更新 README 与 ROADMAP，反映最新功能与开发状态。

Co-authored-by: Cursor <cursoragent@cursor.com>

service/auth.go

@@ -20,10 +20,11 @@ type Claims struct {
 type AuthService struct {
 	jwtSecret string
 	filter    *SensitiveFilter
+	settings  *ForumSettingsService
 }
 
-func NewAuthService(jwtSecret string, filter *SensitiveFilter) *AuthService {
-	return &AuthService{jwtSecret: jwtSecret, filter: filter}
+func NewAuthService(jwtSecret string, filter *SensitiveFilter, settings *ForumSettingsService) *AuthService {
+	return &AuthService{jwtSecret: jwtSecret, filter: filter, settings: settings}
 }
 
 // Register 用户注册
@@ -31,7 +32,7 @@ func (s *AuthService) Register(username, password, nickname string) (*model.User
 	if err := ValidateUsername(username); err != nil {
 		return nil, err
 	}
-	if err := ValidatePassword(password); err != nil {
+	if err := ValidatePassword(password, s.settings.PasswordMinLen()); err != nil {
 		return nil, err
 	}
 	var exist model.User