feat(api,ui): 新增24h错误码最高Key统计与面板

- 新增 GET /api/stats/attention-keys 接口，统计最近24小时指定
  状态码（默认429）错误次数最多的 Key，仅统计内存中的 Key，
  支持 limit 与 status_code 参数
- StatsService 新增 get_attention_keys_last_24h，按 api_key 分组计数并
  降序返回
- UI 新增“值得注意的Key”卡片：支持 429/403/400 快捷切换、自定义状态码
  与数量限制，默认展示 429 前 10
- 列表项支持验证、查看 24h 详情、复制、删除等快捷操作
- 将 Chart.js 与页面脚本改为 defer，保证 DOM 就绪与执行顺序
- 修复：补充获取数量输入框引用，避免初始化未声明变量报错
- 其他：微调日志输出格式

app/router/routes.py

@@ -231,6 +231,35 @@ def setup_api_stats_routes(app: FastAPI) -> None:
             )
             return {"error": "Internal server error"}, 500
 
+    @app.get("/api/stats/attention-keys")
+    async def api_stats_attention_keys(
+        request: Request, limit: int = 20, status_code: int = 429
+    ):
+        """返回最近24小时指定错误码次数最多的Key（仅包含内存Key列表中的）。默认错误码429。"""
+        try:
+            auth_token = request.cookies.get("auth_token")
+            if not auth_token or not verify_auth_token(auth_token):
+                logger.warning("Unauthorized access attempt to attention-keys")
+                return {"error": "Unauthorized"}, 401
+
+            # 支持所有标准HTTP状态码范围
+            # if not isinstance(status_code, int) or status_code < 100 or status_code > 599:
+            #     return {"error": f"Unsupported status_code: {status_code}"}, 400
+
+            key_manager = await get_key_manager_instance()
+            keys_status = await key_manager.get_keys_by_status()
+            in_memory_keys = set(keys_status.get("valid_keys", [])) | set(
+                keys_status.get("invalid_keys", [])
+            )
+            stats_service = StatsService()
+            data = await stats_service.get_attention_keys_last_24h(
+                in_memory_keys, limit, status_code
+            )
+            return data
+        except Exception as e:
+            logger.error(f"Error fetching attention keys: {e}")
+            return {"error": "Internal server error"}, 500
+
     @app.get("/api/stats/key-details")
     async def api_stats_key_details(request: Request, key: str, period: str):
         """获取指定密钥在指定时间段内的调用详情"""
@@ -240,7 +269,9 @@ def setup_api_stats_routes(app: FastAPI) -> None:
                 logger.warning("Unauthorized access attempt to API key stats details")
                 return {"error": "Unauthorized"}, 401
 
-            logger.info(f"Fetching key call details for key=...{key[-4:] if key else ''}, period: {period}")
+            logger.info(
+                f"Fetching key call details for key=...{key[-4:] if key else ''}, period: {period}"
+            )
             stats_service = StatsService()
             details = await stats_service.get_key_call_details(key, period)
             return details