fix: enforce WeChat Pay JSAPI field limits

server-rs/crates/module-runtime/src/lib.rs

@@ -683,9 +683,13 @@ mod tests {
             build_runtime_profile_recharge_wallet_ledger_id("user-1", 200, "points_60"),
             "user-1:200:points_60"
         );
-        assert_eq!(
-            build_runtime_profile_recharge_order_id("user-1", 200, "points_60"),
-            "recharge:user-1:200:points_60"
+        let order_id = build_runtime_profile_recharge_order_id("user-1", 200, "points_60");
+        assert!(order_id.starts_with("rcg"));
+        assert!(order_id.len() <= 32);
+        assert!(
+            order_id
+                .chars()
+                .all(|ch| ch.is_ascii_lowercase() || ch.is_ascii_digit())
         );
         assert_eq!(
             build_runtime_profile_redeem_code_usage_id("GIFT", "user-1", 300, 2),