feat(commerce): 排盘保存需显式同意，默认本地计算不上传

- 前端免费排盘默认不保存，勾选同意后才调用保存接口
- 服务端要求 consentVersion，记录 consentAt，校验并限流公开保存接口
- 付费结算单独披露报告快照与订单信息将由服务端存储
- 管理端展示同意版本与时间，历史无同意证据记录保留并标注

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

server/cmd/main.go

@@ -95,7 +95,7 @@ func main() {
 
 		commerce := api.Group("/commerce")
 		{
-			commerce.POST("/charts", handler.SaveChartRecord)
+			commerce.POST("/charts", middleware.RateLimit(), handler.SaveChartRecord)
 			commerce.POST("/checkout", middleware.Auth(), handler.CreateReportCheckout)
 			commerce.GET("/orders/:orderNo", middleware.Auth(), handler.GetCommerceOrder)
 			commerce.GET("/reports/:reportId/access", middleware.Auth(), handler.GetReportAccess)