feat: 云闪付入口 token 自动登录及权益状态恢复

- 新增 open-api/hhService/tokenDecode 封装，URL 带 token 时自动解码登录并刷新资格
- 解码失败降级为手机号登录，并用 replaceState 清除地址栏 token 防泄露
- 权益页已登录未认证时自动恢复认证状态，认证取消后停留认证页

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

common/http.api.js

@@ -20,12 +20,15 @@ let StoreDetailUrl = 'mp-api/hhrsStore/detail';
 let WinnerDatesUrl = 'mp-api/hhrsWinner/dates';
 let WinnerListUrl = 'mp-api/hhrsWinner/list';
 let AppointUrl = 'zhy-api/cardBag/appoint';
+let TokenDecodeUrl = 'open-api/hhService/tokenDecode';
 
 
 // 此处第二个参数vm，就是我们在页面使用的this
 const install = (Vue, vm) => {
 	let checkerLogin = (params = {}) => vm.$u.post(LoginUrl, params);
 	let sendLoginVerifyCode = (params = {}) => vm.$u.post(SendVerifyCodeUrl, params);
+	// xuchao: 云闪付入口 token 解码
+	let tokenDecode = (params = {}) => vm.$u.post(TokenDecodeUrl, params);
 
 	// 文旅场馆
 	let getVenueList = (params = {}) => vm.$u.get(VenueListUrl, params);
@@ -57,6 +60,7 @@ const install = (Vue, vm) => {
 	vm.$u.api = {
 		checkerLogin,
 		sendLoginVerifyCode,
+		tokenDecode,
 		getVenueList,
 		getVenueDetail,
 		getMerchantList,