Add WebSocket, multi API key, geocoding proxy, beacon map picker, and comprehensive bug fixes

- Multi API Key + permission system (read/write/admin) with SHA-256 hash
- WebSocket real-time push (location, alarm, device_status, attendance, bluetooth)
- Geocoding proxy endpoints for Amap POI search and reverse geocode
- Beacon modal map-based location picker with search and click-to-select
- GCJ-02 ↔ WGS-84 bidirectional coordinate conversion
- Data cleanup scheduler (configurable retention days)
- Fix GPS longitude sign inversion (course_status bit 11: 0=East, 1=West)
- Fix 2G CellID 2→3 bytes across all protocols (0x28, 0x2C, parser.py)
- Fix parser loop guards, alarm_source field length, CommandLog.sent_at
- Fix geocoding IMEI parameterization, require_admin import
- Improve API error messages for 422 validation errors
- Remove beacon floor/area fields (consolidated into name)

via [HAPI](https://hapi.run)

Co-Authored-By: HAPI <noreply@hapi.run>

app/routers/alarms.py

@@ -5,11 +5,14 @@ API endpoints for alarm record queries, acknowledgement, and statistics.
 
 import math
 from datetime import datetime, timezone
+from typing import Literal
 
 from fastapi import APIRouter, Depends, HTTPException, Query
 from sqlalchemy import func, select
 from sqlalchemy.ext.asyncio import AsyncSession
 
+from app.dependencies import require_write
+
 from app.database import get_db
 from app.models import AlarmRecord
 from app.schemas import (
@@ -30,16 +33,18 @@ router = APIRouter(prefix="/api/alarms", tags=["Alarms / 报警管理"])
 async def list_alarms(
     device_id: int | None = Query(default=None, description="设备ID / Device ID"),
     alarm_type: str | None = Query(default=None, description="报警类型 / Alarm type"),
+    alarm_source: str | None = Query(default=None, description="报警来源 / Alarm source (single_fence/multi_fence/lbs/wifi)"),
     acknowledged: bool | None = Query(default=None, description="是否已确认 / Acknowledged status"),
     start_time: datetime | None = Query(default=None, description="开始时间 / Start time (ISO 8601)"),
     end_time: datetime | None = Query(default=None, description="结束时间 / End time (ISO 8601)"),
+    sort_order: Literal["asc", "desc"] = Query(default="desc", description="排序方向 / Sort order (asc/desc)"),
     page: int = Query(default=1, ge=1, description="页码 / Page number"),
     page_size: int = Query(default=20, ge=1, le=100, description="每页数量 / Items per page"),
     db: AsyncSession = Depends(get_db),
 ):
     """
-    获取报警记录列表，支持按设备、报警类型、确认状态、时间范围过滤。
-    List alarm records with filters for device, alarm type, acknowledged status, and time range.
+    获取报警记录列表，支持按设备、报警类型、来源、确认状态、时间范围过滤。
+    List alarm records with filters for device, alarm type, source, acknowledged status, and time range.
     """
     query = select(AlarmRecord)
     count_query = select(func.count(AlarmRecord.id))
@@ -52,6 +57,10 @@ async def list_alarms(
         query = query.where(AlarmRecord.alarm_type == alarm_type)
         count_query = count_query.where(AlarmRecord.alarm_type == alarm_type)
 
+    if alarm_source:
+        query = query.where(AlarmRecord.alarm_source == alarm_source)
+        count_query = count_query.where(AlarmRecord.alarm_source == alarm_source)
+
     if acknowledged is not None:
         query = query.where(AlarmRecord.acknowledged == acknowledged)
         count_query = count_query.where(AlarmRecord.acknowledged == acknowledged)
@@ -68,7 +77,8 @@ async def list_alarms(
     total = total_result.scalar() or 0
 
     offset = (page - 1) * page_size
-    query = query.order_by(AlarmRecord.recorded_at.desc()).offset(offset).limit(page_size)
+    order = AlarmRecord.recorded_at.asc() if sort_order == "asc" else AlarmRecord.recorded_at.desc()
+    query = query.order_by(order).offset(offset).limit(page_size)
     result = await db.execute(query)
     alarms = list(result.scalars().all())
 
@@ -144,6 +154,7 @@ async def get_alarm(alarm_id: int, db: AsyncSession = Depends(get_db)):
     "/{alarm_id}/acknowledge",
     response_model=APIResponse[AlarmRecordResponse],
     summary="确认报警 / Acknowledge alarm",
+    dependencies=[Depends(require_write)],
 )
 async def acknowledge_alarm(
     alarm_id: int,