fix(phase2a): 代码审查修复 - 8项关键/重要问题

安全修复:
- WebSocket Token 增加 Redis 有效性校验（已登出用户无法建立 WS）

功能修复:
- GetRecommendFriends 改为批量查询，正确返回用户名/昵称/头像
- 上下线通知：OnlineService 通过接口注入获取好友列表推送状态变更
- 管理端在线用户 API 补充用户名信息

代码质量:
- 所有 json.Marshal/Redis 错误增加检查与日志
- ContactController 13 个 endpoint 统一走 handleError 业务错误映射
- 管理端 Controller 补全包注释、函数注释和结构化日志
- 前端 5 个联系人页面 avatar 工具函数抽取到 utils/avatar.js

Made-with: Cursor

backend/go-service/app/provider/wire_gen.go

@@ -47,13 +47,13 @@ func InitializeApp(cfg *config.Config) (*App, error) {
 	userManageController := controller2.NewUserManageController(userManageService)
 	hub := ws.ProvideHub()
 	pubSub := ws.ProvidePubSub(client, hub)
-	onlineService := ws.ProvideOnlineService(client, hub, pubSub)
-	onlineManageService := service2.NewOnlineManageService(onlineService)
+	friendshipDAO := dao3.NewFriendshipDAO(gormDB)
+	onlineService := ws.ProvideOnlineService(client, hub, pubSub, friendshipDAO)
+	onlineManageService := service2.NewOnlineManageService(onlineService, gormDB)
 	onlineController := controller2.NewOnlineController(onlineManageService)
 	contactManageService := service2.NewContactManageService(gormDB)
 	contactManageController := controller2.NewContactManageController(contactManageService)
-	handler := ws.ProvideWSHandler(hub, pubSub, jwtConfig, onlineService)
-	friendshipDAO := dao3.NewFriendshipDAO(gormDB)
+	handler := ws.ProvideWSHandler(hub, pubSub, jwtConfig, onlineService, authService)
 	friendGroupDAO := dao3.NewFriendGroupDAO(gormDB)
 	contactService := service3.NewContactService(friendshipDAO, friendGroupDAO, pubSub)
 	contactController := controller3.NewContactController(contactService)