refactor(api): standardize responses and restore media config contracts

app/schemas/token.py

@@ -3,7 +3,16 @@ from typing import Optional
 from pydantic import BaseModel, Field
 
 
+class MfaChallenge(BaseModel):
+    """密码认证通过后需要继续完成的二次验证信息。"""
+
+    # 可用的二次验证方式
+    mfa_methods: list[str] = Field(default_factory=list)
+
+
 class Token(BaseModel):
+    """OAuth2 登录成功后返回的访问令牌。"""
+
     # 令牌
     access_token: str
     # 令牌类型
@@ -19,12 +28,14 @@ class Token(BaseModel):
     # 权限级别
     level: int = 1
     # 详细权限
-    permissions: Optional[dict] = Field(default_factory=dict)
+    permissions: Optional[dict[str, bool]] = Field(default_factory=dict)
     # 是否显示配置向导
     wizard: Optional[bool] = None
 
 
 class TokenPayload(BaseModel):
+    """访问令牌中携带的用户身份与授权信息。"""
+
     # 用户ID
     sub: Optional[int] = None
     # 用户名