security: 修复管理员鉴权与配置导出泄露等严重漏洞

feat: Add jitter and random offset to token refresh intervals for better distribution

feat: Implement account role management and banning functionality

Initial commit: ds2api with HF Spaces support