修复生成图片签名地址重复换签

将 refreshKey 调整为 signed URL 缓存版本号，同一路径同版本复用未过期签名地址。

让完整阿里云 OSS generated 地址在 hook 中先归一并走 read-url 换签。

补充前端回归测试，覆盖相同 refreshKey 不重复换签和完整 OSS 地址不裸写入图片。

更新运维文档与 Hermes 记忆，明确 refreshKey 不是每次绕过签名缓存。

src/hooks/useResolvedAssetReadUrl.ts

@@ -1,8 +1,8 @@
 import { useEffect, useState } from 'react';
 
 import {
-  isGeneratedLegacyPath,
   resolveAssetReadUrl,
+  shouldResolveAssetReadUrl,
 } from '../services/assetReadUrlService';
 
 type UseResolvedAssetReadUrlOptions = {
@@ -18,7 +18,7 @@ export function useResolvedAssetReadUrl(
   const enabled = options.enabled !== false;
   const normalizedSource = source?.trim() ?? '';
   const shouldResolve =
-    enabled && Boolean(normalizedSource) && isGeneratedLegacyPath(normalizedSource);
+    enabled && shouldResolveAssetReadUrl(normalizedSource);
   const [resolvedUrl, setResolvedUrl] = useState(
     shouldResolve ? '' : normalizedSource,
   );