fix: 审查修复波次（P0x4 + P1x30+）

- domain/rules: 计分与排名解耦、破纪录按组别、tieBreak 生效、调整分不丢、移除 aggregate 假能力
- realtime: 新建 internal/dto，快照三项契约对齐，/ws 只认会话身份
- httpapi: 流水幂等、standings 整表载荷、广播接线、强制改密、XFF 防伪造、records 写入、审计、赛事包内容、发布前备份、result.points、实例列表
- web: FormData 上传、YAML 解析、快照归一化、大屏解析层、bootstrap 降级、访客判定、主题切换
- console: 优雅关闭握手、中文化、免验证改管理员账号、选屏与日志轮转修复
- docs: 用户文档三份 + README
- 主代理: 破纪录加分接线（levels 未加载导致恒 0）

server/internal/httpapi/handlers_results.go

@@ -77,19 +77,11 @@ func (s *server) voidResultHandler(w http.ResponseWriter, r *http.Request) (any,
 // ---------- 积分与排名 ----------
 
 func (s *server) standingsHandler(w http.ResponseWriter, r *http.Request) (any, error) {
-	in, err := s.loadStandingsInput(r.Context())
-	if err != nil {
-		return nil, err
-	}
-	teams, err := s.teamMap(r.Context())
-	if err != nil {
-		return nil, err
-	}
-	return standingRowsDTO(domain.BuildTeamStandings(in), teams), nil
+	return s.standingsSnapshot(r.Context(), s.ev)
 }
 
 func (s *server) athleteStandingsHandler(w http.ResponseWriter, r *http.Request) (any, error) {
-	in, err := s.loadStandingsInput(r.Context())
+	in, err := s.loadStandingsInput(r.Context(), s.ev)
 	if err != nil {
 		return nil, err
 	}