fix: 审查修复波次（P0x4 + P1x30+）

- domain/rules: 计分与排名解耦、破纪录按组别、tieBreak 生效、调整分不丢、移除 aggregate 假能力
- realtime: 新建 internal/dto，快照三项契约对齐，/ws 只认会话身份
- httpapi: 流水幂等、standings 整表载荷、广播接线、强制改密、XFF 防伪造、records 写入、审计、赛事包内容、发布前备份、result.points、实例列表
- web: FormData 上传、YAML 解析、快照归一化、大屏解析层、bootstrap 降级、访客判定、主题切换
- console: 优雅关闭握手、中文化、免验证改管理员账号、选屏与日志轮转修复
- docs: 用户文档三份 + README
- 主代理: 破纪录加分接线（levels 未加载导致恒 0）

server/main.go

@@ -12,6 +12,7 @@ import (
 	"os"
 	"os/signal"
 	"path/filepath"
+	"strings"
 	"syscall"
 	"time"
 
@@ -21,6 +22,7 @@ import (
 	"git.yeij.top/AskaEth/Scoreboard/server/internal/config"
 	"git.yeij.top/AskaEth/Scoreboard/server/internal/export"
 	"git.yeij.top/AskaEth/Scoreboard/server/internal/httpapi"
+	"git.yeij.top/AskaEth/Scoreboard/server/internal/middleware"
 	"git.yeij.top/AskaEth/Scoreboard/server/internal/realtime"
 	"git.yeij.top/AskaEth/Scoreboard/server/internal/store"
 )
@@ -85,6 +87,15 @@ func main() {
 	hub := realtime.NewHub(eventDB, logger)
 	defer func() { _ = hub.Close() }()
 
+	// 可信代理：默认空，表示不采信任何代理头（见 devdocs/08 第 1 节）。
+	// 反向代理部署时用 SCOREBOARD_TRUSTED_PROXIES 指定代理 IP/CIDR，逗号分隔。
+	if raw := strings.TrimSpace(os.Getenv("SCOREBOARD_TRUSTED_PROXIES")); raw != "" {
+		if err := middleware.SetTrustedProxies(strings.Split(raw, ",")); err != nil {
+			logger.Error("可信代理配置非法", "err", err)
+			os.Exit(1)
+		}
+	}
+
 	ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
 	defer stop()
 
@@ -102,14 +113,16 @@ func main() {
 	srv := &http.Server{
 		Addr: cfg.Server.Addr(),
 		Handler: httpapi.New(httpapi.Options{
-			Logger:  logger,
-			Version: version,
-			System:  st.DB(),
-			Event:   eventDB,
-			Auth:    authSvc,
-			DataDir: cfg.DataDir,
-			Display: displaySender{hub: hub},
-			WS:      hub.Handler(),
+			Logger:     logger,
+			Version:    version,
+			System:     st.DB(),
+			Event:      eventDB,
+			Auth:       authSvc,
+			DataDir:    cfg.DataDir,
+			ProjectDir: filepath.Join(cfg.DataDir, "event_projs", *project),
+			Display:    displaySender{hub: hub},
+			Realtime:   hub,
+			WS:         hub.Handler(),
 		}),
 		ReadHeaderTimeout: 10 * time.Second,
 	}