Add Jin10 QR connection with cancellable login tasks

Store account credentials encrypted and bind QR tasks to administrator sessions. Report calendar access as awaiting validation after login.

Prevent late polls and status responses from overwriting cancelled or newer operations, and clean up QR tasks when settings unmount. Cover authentication, cancellation races, and stale frontend responses.

web/src/common/apis/jin10/index.ts

@@ -0,0 +1,18 @@
+import type * as Jin10 from "./type"
+import { request } from "@/http/axios"
+
+export function getJin10Api() {
+  return request<Jin10.Jin10Status>({ url: "/settings/jin10", method: "get" })
+}
+export function createJin10QrApi() {
+  return request<Jin10.Jin10Qr>({ url: "/settings/jin10/qr", method: "post" })
+}
+export function pollJin10QrApi(id: string) {
+  return request<Jin10.Jin10Poll>({ url: `/settings/jin10/qr/${id}/poll`, method: "post" })
+}
+export function cancelJin10QrApi(id: string) {
+  return request<null>({ url: `/settings/jin10/qr/${id}`, method: "delete", notify: false })
+}
+export function disconnectJin10Api() {
+  return request<null>({ url: "/settings/jin10", method: "delete" })
+}

web/src/common/apis/jin10/type.ts

@@ -0,0 +1,14 @@
+export interface Jin10Status {
+  connected: boolean
+  connected_at: string | null
+  error: string | null
+  sync_state: "awaiting_validation" | "disconnected"
+}
+export interface Jin10Qr {
+  task_id: string
+  image: string
+  expires_at: string
+}
+export interface Jin10Poll {
+  state: "pending" | "connected" | "expired"
+}