feat: 核心模块增强 — 加密 + 运行时配置 + 日志缓冲

- crypto.py: API Key 加密/解密工具
- runtime_config.py: 运行时动态配置管理
- log_buffer.py: 内存日志缓冲区
- config.py: 新增加密配置项
- http_client.py: 增强重试和错误处理

src/api/routes/matches.py

@@ -7,6 +7,7 @@ from fastapi import APIRouter, Depends, HTTPException, Query
 from sqlalchemy import select
 from sqlalchemy.orm import selectinload
 
+from src.api.deps import require_admin
 from src.api.schemas import MatchListOut, MatchOut
 from src.db.base import AsyncSession, get_db_read
 from src.db.models import League, Match
@@ -14,7 +15,7 @@ from src.db.models import League, Match
 router = APIRouter(prefix="/api/v1", tags=["data"])
 
 
-@router.get("/leagues", response_model=list[dict])
+@router.get("/leagues", response_model=list[dict], dependencies=[Depends(require_admin)])
 async def list_leagues(db: AsyncSession = Depends(get_db_read)):
     stmt = select(League).order_by(League.name)
     result = await db.execute(stmt)
@@ -64,7 +65,12 @@ async def list_matches(
             raise HTTPException(400, "date 格式应为 YYYY-MM-DD")
         q = q.where(Match.match_date >= d, Match.match_date < d + timedelta(days=1))
 
-    rows = (await db.execute(q.order_by(Match.match_date.desc(), Match.id.desc()).limit(limit + 1))).scalars().all()
+    # 未开赛按日期正序(最近的排最前,便于预测);其余按日期倒序(最新赛果在前)
+    if status == "scheduled":
+        order = (Match.match_date.asc(), Match.id.asc())
+    else:
+        order = (Match.match_date.desc(), Match.id.desc())
+    rows = (await db.execute(q.order_by(*order).limit(limit + 1))).scalars().all()
     has_more = len(rows) > limit
     rows = rows[:limit]