feat: 系统设置增加备份恢复与默认登录 admin

支持手动/每日自动备份四所数据库、K线库与 env，上传 zip 一键恢复；中控默认账号 admin/admin123。

Co-authored-by: Cursor <cursoragent@cursor.com>

manual_trading_hub/hub_web_auth.py

@@ -13,6 +13,7 @@ from secrets import compare_digest
 SESSION_COOKIE = "hub_sess"
 SESSION_MAX_AGE_SEC = max(3600, int(os.getenv("HUB_SESSION_DAYS", "7")) * 86400)
 DEFAULT_USERNAME = "admin"
+DEFAULT_PASSWORD = "admin123"
 
 
 def _env_username() -> str:
@@ -20,12 +21,13 @@ def _env_username() -> str:
 
 
 def _env_password() -> str:
-    return (os.getenv("HUB_PASSWORD") or "").strip()
+    raw = (os.getenv("HUB_PASSWORD") or "").strip()
+    return raw or DEFAULT_PASSWORD
 
 
 def password_required() -> bool:
-    """已配置密码即要求登录（用户名未设时默认 admin）。"""
-    return bool(_env_password())
+    """默认启用登录（admin / admin123，可通过 .env 覆盖）。"""
+    return True
 
 
 def expected_username() -> str:
@@ -33,8 +35,6 @@ def expected_username() -> str:
 
 
 def verify_credentials(username: str, password: str) -> bool:
-    if not _env_password():
-        return True
     u_ok = compare_digest(expected_username(), (username or "").strip())
     p_ok = compare_digest(_env_password(), (password or "").strip())
     return u_ok and p_ok