fix(auth): web 正确识别手机号与小程序/微信绑定状态

- auth.pickUser 持久化 wxBound/wxMiniBound
- Profile.refreshBind 用 fresh /auth/me 回写用户缓存与卡片，取消 stale localStorage

website/src/services/auth.js

@@ -23,6 +23,8 @@ function pickUser(d) {
     avatar: d.avatar || '',
     phone: d.phone || '',
     phoneBound: !!d.phoneBound,
+    wxBound: !!d.wxBound,
+    wxMiniBound: !!d.wxMiniBound,
     role: d.role || '',
     account_type: d.account_type || '',
     account_type_label: d.account_type_label || '',

website/src/user/Profile.jsx

@@ -71,6 +71,8 @@ export default function Profile() {
     try {
       const p = await me();
       setBind({ phone: p.phone || '', phoneBound: !!p.phoneBound, wxBound: !!p.wxBound, wxMiniBound: !!p.wxMiniBound });
+      // 用 fresh /me 回写本地用户缓存与用户卡，避免读 stale localStorage 导致手机号/绑定不同步
+      saveUser({ ...getUser(), phone: p.phone || '', phoneBound: !!p.phoneBound, wxBound: !!p.wxBound, wxMiniBound: !!p.wxMiniBound });
       setUser(getUser() || {});
     } catch (e) { /* 未登录 */ }
   };