feat: add daily request limit and refactor access control (#759)

- Add daily request limit per IP in blacklist settings (1-1,000,000/day)
- Refactor access control logic: merge blacklist and rate limit checks
- Remove RATE_LIMIT_API_DAILY_REQUESTS env var, use database config instead
- Move x-custom-auth check earlier in middleware chain
- Add comprehensive English documentation (31 new guide pages)
- Improve code structure and error handling

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-authored-by: Claude <noreply@anthropic.com>

vitepress-docs/docs/en/guide/feature/s3-attachment.md

@@ -0,0 +1,34 @@
+# Configure S3 Attachments
+
+## Configuration
+
+> [!NOTE]
+> If you don't need S3 attachments, you can skip this step
+
+Create an R2 bucket in Cloudflare. You can also use other S3 services (please submit an issue if you encounter bugs).
+
+Reference: [Configure Cloudflare R2 cors](https://developers.cloudflare.com/r2/buckets/cors/#add-cors-policies-from-the-dashboard)
+
+Reference: [Cloudflare R2 s3 token](https://developers.cloudflare.com/r2/api/s3/tokens/) to create a token, obtain `ENDPOINT`, `Access Key ID` and `Secret Access Key`, then execute the following commands to add them to secrets
+
+> [!NOTE]
+> You can also add `secrets` in the Cloudflare worker UI interface
+
+```bash
+cd worker
+pnpm wrangler secret put S3_ENDPOINT
+pnpm wrangler secret put S3_ACCESS_KEY_ID
+pnpm wrangler secret put S3_SECRET_ACCESS_KEY
+# Note: Replace bucket with your bucket name
+pnpm wrangler secret put S3_BUCKET
+```
+
+## Usage
+
+Save attachment
+
+![S3 save](/feature/s3-save.png)
+
+Download attachment
+
+![S3 download](/public/feature/s3-download.png)