Hide manual trade by default, block open while running, auto-refresh auth token.

Also fix flat-side reconcile to check both long and short residuals; document in 更新说明.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/styles/app.css

@@ -613,6 +613,25 @@ input {
   border: 1px solid var(--line);
 }
 
+.btn.danger {
+  background: transparent;
+  color: var(--danger);
+  border: 1px solid var(--danger);
+}
+
+.btn.danger:hover:not(:disabled) {
+  background: rgba(246, 70, 93, 0.12);
+}
+
+.btn.btn-running,
+.btn.btn-running:disabled {
+  background: rgba(14, 203, 129, 0.16);
+  color: #0ecb81;
+  border: 1px solid #0ecb81;
+  opacity: 1;
+  cursor: default;
+}
+
 .btn.block {
   width: 100%;
 }