feat: 新增设备登录开关配置，优化 CI Go 模块缓存机制，并添加解密中间件调试日志。

apps/api/internal/middleware/decryptMiddleware.go

@@ -8,6 +8,7 @@ import (
 	"io"
 	"net"
 	"net/http"
+	"net/url"
 	"strings"
 
 	"github.com/zero-ppanel/zero-ppanel/apps/api/internal/config"
@@ -26,6 +27,8 @@ func NewDecryptMiddleware(c config.Config) *DecryptMiddleware {
 
 func (m *DecryptMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
 	return func(w http.ResponseWriter, r *http.Request) {
+		fmt.Printf("[DEBUG] DecryptMiddleware entered, Security.Enable=%v, Login-Type=%q\n",
+			m.conf.Security.Enable, r.Header.Get("Login-Type"))
 		if !m.conf.Security.Enable {
 			next(w, r)
 			return
@@ -86,7 +89,12 @@ func (m *DecryptMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
 				httpx.Error(w, xerr.NewErrCode(xerr.DecryptFailed))
 				return
 			}
+			fmt.Printf("[DEBUG] decrypted body: %s\n", string(plain))
 			r.Body = io.NopCloser(bytes.NewBuffer(plain))
+			// 防止 httpx.Parse 内部的 r.ParseForm() 消费已替换的 body：
+			// ParseForm 首行检查 r.PostForm == nil，置空后它不会再读 body。
+			r.PostForm = url.Values{}
+			r.ContentLength = int64(len(plain))
 		}
 
 		next(rw, r)