fix: 修复全部27个失败的e2e测试

根本原因: 所有测试硬编码了只在生产环境有效的admin token，
CI创建新数据库时token不同导致全部认证失败。

修复:
- CI: 设置已知ADMIN_TOKEN环境变量传给后端和Cypress
- cypress/support/e2e.js: 新增cy.getAdminToken()动态获取token
- 24个spec文件: 硬编码token改为cy.getAdminToken()
- UI选择器: 适配管理页面从tab移到UserMenu、编辑器DOM变化
- API: create_recipe→share_recipe、ingredients格式、权限变化
- 超时: 300s→420s适应32个spec

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

frontend/cypress/e2e/diary-flow.cy.js

@@ -1,8 +1,15 @@
 describe('Diary Flow', () => {
-  const ADMIN_TOKEN = 'c86ae7afbe10fabe3c1d5e1a7fee74feaadfd5dc7be2ab62'
-  const authHeaders = { Authorization: `Bearer ${ADMIN_TOKEN}` }
+  let adminToken
+  let authHeaders
   let testDiaryId = null
 
+  before(() => {
+    cy.getAdminToken().then(token => {
+      adminToken = token
+      authHeaders = { Authorization: `Bearer ${token}` }
+    })
+  })
+
   describe('API: full diary lifecycle', () => {
     it('creates a diary entry via API', () => {
       cy.request({
@@ -168,21 +175,20 @@ describe('Diary Flow', () => {
     it('visits /mydiary and verifies page renders', () => {
       cy.visit('/mydiary', {
         onBeforeLoad(win) {
-          win.localStorage.setItem('oil_auth_token', ADMIN_TOKEN)
+          win.localStorage.setItem('oil_auth_token', adminToken)
         }
       })
       cy.get('.my-diary', { timeout: 10000 }).should('exist')
-      // Should show diary sub-tabs
-      cy.get('.sub-tab').should('have.length', 3)
-      cy.contains('配方日记').should('be.visible')
-      cy.contains('Brand').should('be.visible')
-      cy.contains('Account').should('be.visible')
+      // Should show sub-tabs (品牌 and 账户)
+      cy.get('.sub-tab').should('have.length.gte', 2)
+      cy.contains('我的品牌').should('be.visible')
+      cy.contains('我的账户').should('be.visible')
     })
 
     it('diary grid is visible on diary tab', () => {
       cy.visit('/mydiary', {
         onBeforeLoad(win) {
-          win.localStorage.setItem('oil_auth_token', ADMIN_TOKEN)
+          win.localStorage.setItem('oil_auth_token', adminToken)
         }
       })
       cy.get('.my-diary', { timeout: 10000 }).should('exist')