feat: Add tags and endpoint summaries to various controllers for better API documentation

- Added tags to BrowserAuthController for browser authentication endpoints.
- Added tags to CatalogController for public catalog access.
- Added tags to CommerceController for student transaction operations.
- Added tags to CommissionController for tenant commission management.
- Added tags to CrmController for tenant CRM functionalities.
- Added tags to HealthController for system health checks.
- Added tags to LearningController for student learning resources.
- Added tags to MeController for current user information.
- Added tags to PlatformAdminController for platform management.
- Introduced PlatformBackofficeController for backend permissions management.
- Added tags to PlatformBillingCallbackController for billing callbacks.
- Added tags to PlatformPaymentSettingsController for payment settings management.
- Added tags to PlatformSaasController for SaaS package management.
- Added tags to PlatformTenantCapabilitiesController for tenant capabilities.
- Added tags to PointsController for student points management.
- Added tags to ProfileController for student profile management.
- Added tags to QuestionVideosController for question video resources.
- Added tags to ReferralController for referral growth management.
- Added tags to RuntimeController for runtime configurations.
- Added tags to ScorelineController for scoreline management.
- Added tags to TaxonomyController for category management.
- Added tags to TenantAdminDirectController for tenant operations management.
- Introduced TenantBackofficeController for tenant backend permissions.
- Added tags to TenantBillingController for tenant billing operations.
- Added tags to TenantCommerceController for tenant commerce operations.
- Added tags to TenantContentController for tenant content management.
- Added tags to TenantContentDirectController for direct content management.
- Added tags to TenantFrontendConfigController for frontend configurations.
- Added tags to TenantOnboardingController for onboarding guidance.
- Added tags to TenantPublicController for public tenant configurations.
- Added tags to TenantsController for current tenant information.
- Added tags to VideosController for student video resources.

Tiku.Api/Controllers/BrowserAuthController.cs

@@ -14,6 +14,7 @@ using Tiku.Infrastructure.Content;
 namespace Tiku.Api.Controllers;
 
 [ApiController]
+[Tags("租户端-浏览器认证")]
 [Route("api/browser-auth")]
 [Produces("application/json")]
 public sealed class BrowserAuthController(
@@ -28,6 +29,7 @@ public sealed class BrowserAuthController(
     [AllowAnonymous]
     [EnableRateLimiting(AuthRateLimitPolicies.Sms)]
     [HttpPost("sms/send")]
+    [EndpointSummary("发送浏览器短信验证码")]
     public async Task<ActionResult<SmsSendResult>> SendSmsCode(
         [FromBody] SendSmsCodeDto request,
         CancellationToken cancellationToken)
@@ -52,6 +54,7 @@ public sealed class BrowserAuthController(
 
     [AllowAnonymous]
     [HttpPost("login/password")]
+    [EndpointSummary("浏览器手机号密码登录")]
     public async Task<ActionResult<object>> LoginWithPassword(
         [FromBody] PasswordLoginDto request,
         CancellationToken cancellationToken)
@@ -73,6 +76,7 @@ public sealed class BrowserAuthController(
     [AllowAnonymous]
     [EnableRateLimiting(AuthRateLimitPolicies.Sms)]
     [HttpPost("login/sms")]
+    [EndpointSummary("浏览器短信验证码登录")]
     public async Task<ActionResult<object>> LoginWithSms(
         [FromBody] SmsLoginDto request,
         CancellationToken cancellationToken)
@@ -91,6 +95,7 @@ public sealed class BrowserAuthController(
 
     [AllowAnonymous]
     [HttpPost("oauth/wechat")]
+    [EndpointSummary("浏览器微信网页 OAuth 登录")]
     public async Task<ActionResult<object>> LoginWithWechatWeb(
         [FromBody] OAuthCodeDto request,
         CancellationToken cancellationToken)
@@ -108,6 +113,7 @@ public sealed class BrowserAuthController(
 
     [AllowAnonymous]
     [HttpPost("oauth/wechat-miniapp")]
+    [EndpointSummary("浏览器微信小程序登录")]
     public async Task<ActionResult<object>> LoginWithWechatMiniApp(
         [FromBody] OAuthCodeDto request,
         CancellationToken cancellationToken)
@@ -125,6 +131,8 @@ public sealed class BrowserAuthController(
 
     [AllowAnonymous]
     [HttpPost("refresh")]
+    [EndpointSummary("刷新浏览器登录会话")]
+    [EndpointDescription("读取浏览器 refresh cookie，轮换会话并重新写入认证 cookie。")]
     public async Task<ActionResult<object>> Refresh(CancellationToken cancellationToken)
     {
         var refreshToken = Request.Cookies[BrowserAuthOptions.RefreshCookie];
@@ -139,6 +147,8 @@ public sealed class BrowserAuthController(
 
     [AllowAnonymous]
     [HttpPost("logout")]
+    [EndpointSummary("退出浏览器登录")]
+    [EndpointDescription("撤销浏览器 refresh cookie 对应会话，并清理 access、refresh 与 CSRF cookie。")]
     public async Task<IActionResult> Logout(CancellationToken cancellationToken)
     {
         var refreshToken = Request.Cookies[BrowserAuthOptions.RefreshCookie];
@@ -152,6 +162,7 @@ public sealed class BrowserAuthController(
 
     [Authorize]
     [HttpPost("logout-all")]
+    [EndpointSummary("退出全部浏览器登录会话")]
     public async Task<IActionResult> LogoutAll(CancellationToken cancellationToken)
     {
         if (currentUser.UserId is not { } userId) return Unauthorized();